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[1059] A hybrid access scheme, referred to as partial controlled access, 
provides the HSBS service as a subscription-based service that is encrypted 
with intermittent unencrypted advertisement transmissions. These 
advertisements may be intended to encourage subscriptions to the encrypted 
HSBS service. Scheduling of such unencrypted segments could be known to 
the MS through external means. 

[1060] A wireless communication system 200 is illustrated in FIG. 3, wherein 
video and audio information is provided to Packetized Data Service Network 
(PDSN) 202 by a Content Server (CS) 201. The video and audio information 
may be from televised programming or a radio transmission. The information is 
provided as packetized data, such as in IP packets. The PDSN 202 processes 
the IP packets for distribution within an Access Network (AN). As illustrated the 
AN is defined as the portions of the system including a BS 204 in 
communication with multiple MS 206. The PDSN 202 is coupled to the BS 204. 
For HSBS service, the BS 204 receives the stream of information from the 
PDSN 202 and provides the information on a designated channel to subscribers 
within the system 200. To control the access, the content is encrypted by the 
CS 201 before being provided to the PDSN 202. The subscribed users are 
provided with the decryption key so that the IP packets can be decrypted. 
[1061] FIG. 4 details an MS 300, similar to MS 206 of FIG. 3. The MS 300 
has an antenna 302 coupled to receive circuitry 304. The MS 300 receives 
transmissions from a BS (not shown) similar to BS 204 of FIG. 3. The MS 300 
includes a User Identification Module (UIM) 308 and a Mobile Equipment (ME) 
306. The receive circuitry is coupled to the UIM 308 and the ME 306. The UIM 
308 applies verification procedures for security of the HSBS transmission and 
provides various keys to the ME 306. The ME 306 may be coupled to 
processing unit 312. The ME 306 performs substantial processing, including, 
but not limited to, decryption of HSBS content streams. The ME 306 includes a 
memory storage unit, MEM 310. In the exemplary embodiment the data in the 
ME 306 processing unit (not shown) and the data in the ME memory storage 
unit, MEM 310 may be accessed easily by a non-subscriber by the use of 
limited resources, and therefore, the ME 306 is said to be insecure. Any 
information passed to the ME 306 or processed by the ME 306 remains 
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securely secret for only a short amount of time. It is therefore desired that any 
secret information, such as key(s), shared with the ME 306 be changed often. 
[1062] The UIM 308 is trusted to store and process secret information (such 
as encryption l<eys) that should remain secret for a long time. As the UIM 308 is 
a secure unit, the secrets stored therein do not necessarily require the system 
to change the secret infomnation often. The UIM 308 includes a processing unit 
referred to as a Secure UIM Processing Unit (SUPU) 316 and memory storage 
unit referred to as a Secure UIM Memory Unit (SUMU) 314 that is trusted to be 
secure. Within the UIM 308, SUMU 314 stores secret information in such a 
way as to discourage unauthorized access to the information. If the secret 
information is obtained from the UIM 308, the access will require a significantly 
large amount of resources. Also within the UIM 308, the SUPU 316 performs 
computations on values that may be external to the UIM 308 and/or internal to 
the UIM 308. The results of the computation may be stored in the SUMU 314 or 
passed to the ME 306. The computations performed with the SUPU 316 can 
only be obtained from the UIM 308 by an entity with significantly large amount of 
resources. Similarly, outputs from the SUPU 316 that are designated to be 
stored within the SUMU 314 (but not output to the ME 306) are designed such 
that unauthorized interception requires significantly large amount of resources. 
In one embodiment, the UIM 308 is a stationary unit within the MS 300. Note 
that in addition to the secure memory and processing within the UIM 308, the 
UIM 308 may also include non-secure memory and processing (not shown) for 
storing information including telephone numbers, e-mail address infonnation, 
web page or URL address information, and/or scheduling functions, etc. 
[1063] Alternate embodiments may provide a removable and/or 
reprogrammable UIM. In the exemplary embodiment, the SUPU 316 does not 
have significant processing power for functions beyond security and key 
procedures, wherein security and key procedures are typically may be used to 
allow encryption of the broadcast content of the HSBS. Alternate embodiments 
may implement a UIM having stronger processing power. 
[1064] The UIM 308 is associated with a particular user and is used primarily 
to verify that the MS 300 is entitled to the privileges afforded the user, such as 
access to the mobile phone network. Therefore, a user is associated with the 
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UIM 308 rather than an MS 300. The same user may be associated with 
multiple UIM 308. 

[1065] The broadcast service faces a problem in determining how to 
distribute Iteys to subscribed users. To decrypt the broadcast content at a 
particular time, the ME must l^now the current decryption key. To avoid theft-of- 
sen/ice, the decryption l<ey should be changed frequently, for example, one 
service updates the key every minute. These decryption keys are called Short- 
term Keys (SK). The SK is used to decrypt the broadcast content for a short 
amount of time so the SK can be assumed to have some amount of intrinsic 
monetary value for a user. For example, this intrinsic monetary value may be a 
portion of the registration costs. Assume that the cost of a non-subscriber 
obtaining SK from the memory storage unit MEM 310 of a subscriber exceeds 
the intrinsic monetary value of SK. That is, the cost of illegitimately obtaining 
the SK exceeds the reward, resulting in no net benefit. Consequently, the need 
to protect the SK in the memory storage unit MEM 310 is reduced. However, if 
a secret key has a lifetime longer than that of the SK, the cost of illegitimately 
obtaining this secret key may actually be less than the reward. In this situation, 
there is a net benefit in illegitimately obtaining such a key from the memory 
storage unit MEM 310. Hence, ideally the memory storage unit MEM 310 will 
not store secrets with a lifetime longer than that of the SK. 
[1066] The channels used by the CS (not shown) to distribute the SK to the 
various subscriber units are assumed to be insecure. In other words, an 
optimum design will assume the channels are insecure and design the SK 
accordingly. Therefore, when distributing a given SK, the CS desires to use a 
technique that hides the value of the SK from non-subscribed users. 
Furthermore, the CS distributes the SK to each of a potentially large number of 
subscribers for processing in respective MEs within a relatively short timeframe. 
Known secure methods of key transmission are traditionally slow and require 
transmission of a large number of keys. Key transmission methods are 
generally not feasible for the desired combination of security and efficiency 
criteria. The exemplary embodiment is a feasible method of distributing 
decryption keys to a large set of subscribers within a small time-frame in such a 
way that non-subscribers cannot obtain the decryption keys. 
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[1067] The exemplary embodiment is described as transmitting the 
information in Internet Protocol compatible pacltets, such as "IPSec" packets as 
described hereinbelow, and therefore, the following description provides a brief 
introduction to terminology used in association with IPSec. This terminology is 
useful for describing exemplary embodiments, but the use of this terminology is 
not meant to limit the exemplary embodiment to communications using IPSec. 
[1 068] The foundations of IPSec are specified in RFC 1 825 entitled "Security 
Architecture for the Internet Protocol" by R. Atkinson in August 1995, RFC 1826 
entitled "IP Authentication Header" by R. Atkinson in August 1995, and RFC 
1827 entitled "IP Encapsulating Security Payload (ESP)" by R. Atkinson in 
August 1995. The authentication header is a mechanism for providing integrity 
to IP datagrams, wherein IP datagrams are generally a collection of useful 
information, referred to as a payload, combined with network control information 
and an IP header. Network routers use the IP header to direct the packet to the 
proper network node. In some circumstances, the authentication header may 
also provide authentication to IP datagrams. ESP is a mechanism for providing 
confidentiality and integrity to IP datagrams, and may be used in conjunction 
with the authentication header. IPSec utilizes "security associations" to 
describe the parameters, such as the encryption key and encryption algorithm, 
used to encrypt and/or authenticate communications between a group of 
entities. Note that the concept of a security association is also valid when 
applied to cryptosystems not based on IPSec. 

[1069] An IPSec packet includes a 32-bit parameter called the Security 
Parameter Index (SPI) that is used, in conjunction with the destination address, 
to identify the security association used to encrypt and/or authenticate the 
contents of the IP datagram. An entity may store the security associations in a 
security association database and index the security associations according to 
the Destination Address and SPI. The encrypted contents of an IPSec packet 
are often called the payload. 

[1070] In the exemplary embodiment, the MS 300 supports HSBS in a 
wireless communication system. To obtain access to HSBS, the user must 
register and then subscribe to the service. Once the subscription is enabled, 
the various keys are updated as required. In the registration process the CS 
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and UIM 308 negotiate a security association, and agree on a Registration Key 
(RK) and otiier parameters required for tlie security association between the 
user and the CS. The CS may then send the UiM 308 further secret information 
encrypted with the RK. The RK is l<ept as a secret in the UIM 308, while other 
parameters may be kept in the ME 306. The RK is unique to a given UIM 308, 
i.e., each user is assigned a different RK. The registration process alone does 
not give the user access to HSBS. 

[1071] As stated hereinabove, after registration the user subscribes to the 
service. In the subscription process the CS sends the UIM 308 the value of a 
common Broadcast Access Key (BAK). Note that while the RK is specific to the 
UIM 308, the BAK is used to encrypt a broadcast message to multiple users. 
The CS sends the MS 300, and specifically UIM 308, the value of BAK 
encrypted using the RK unique to UIM 308. The UIM 308 is able to recover the 
value of the original BAK from the encrypted version using the RK. The BAK, 
along with other parameters, form a security association between the CS and 
the group of subscribed users. The BAK is kept as a secret in the UIM 308, 
while other parameters of the security association may be kept in the ME 306. 
The CS then broadcasts data called SK Information (SKI) that is combined with 
the BAK in the UIM 308 to derive SK. The UIM 308 then passes SK to the ME 
306. In this way, the CS can efficiently distribute new values of SK to the ME of 
subscribed users. Presented hereinbelow are several examples of how SK is 
derived from SKI, and the forms that SKI may take. The registration and 
subscription processes are discussed in detail, after which the SKI and SK are 
described. 

[1072] With respect to registration, when a user registers with a given CS, 
the UIM 308 and the CS (not shown) set-up a security association. That is, the 
UIM 308 and the CS agree on a secret registration key RK. The RK Is unique to 
each UIM 308, although if a user has multiple UIMs then these UIMs may share 
the same RK dependent on the policies of the CS. This registration may occur 
when the user subscribes to a broadcast channel offered by the CS or may 
occur prior to subscription. A single CS may offer multiple broadcast channels. 
The CS may choose to associate the user with the same RK for all channels or 
require the user to register for each channel and associate the same user with 
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different RKs on different channels. l\/lultiple CSs may clioose to use the same 
registration keys or require the user to register and obtain a different RK for 
each CS. 

[1073] Three common scenarios for setting up this security association 
include: 1) the Authenticated Key Agreement (AKA) method which is used in 
3GPP systems; 2) the Internet Key Exchange (IKE) method as used in IPSec; 
and 3) Over-The-Air-Service-Provisioning (OTASP). In either case the UIM 
memory unit SUMU 314 contains a secret key referred to herein as the A-key. 
For example, using the AKA method, the A-key is a secret known only to the 
UIM and a Trusted Third Party (TTP), wherein the TIP may consist of more 
than one entity. The TTP is typically the mobile service provider with whom the 
user is registered. All communication between the CS and TTP is secure, and 
the CS trusts that the TTP will not assist unauthorized access to the broadcast 
service. When the user registers, the CS informs the TTP that the user wishes 
to register for the service and provides verification of the user's request. The 
TTP uses a function, similar to a cryptographic hash function, to compute the 
RK from the A-key and additional data called Registration Key Information 
(RKI). The TTP passes RK and/or RKl to the CS over a secure channel along 
with other data. The CS sends RKI to the MS 300. The receiver circuitry 304 
passes RKI to the UIM 308 and may pass RKI to the ME 306. The UIM 308 
computes RK from RKI and the A-key that is stored in the UIM memory unit 
SUMU 314. The RK is stored in the UIM memory unit SUMU 314 and is not 
provided directly to the ME 306. Alternate embodiments may use an IKE 
scenario or some other method to establish the RK. The other parameters of 
the security association between the CS and UIM 308 must also be negotiated. 
The RK is kept as a secret in the UIM 308, while other parameters of the 
security association may be kept in the ME 306. In the exemplary embodiment, 
in which BAK is sent to the UIM 308 as an IPSec packet encrypted using RK, 
the CS and MS 300 negotiate a value of SPl used to index the security 
association and this SPt is denoted SPI_RK. 

[1074] In the AKA method, the RK is a secret shared between the CS, UIM 
and TTP. Therefore, as used herein, the AKA method implies that any security 
association between the CS and UIM implicitly includes the TTP. The inclusion 
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of the TTP in any security association is not considered a breach of security as 
the CS trusts the TTP not to assist in unauthorized access to the broadcast 
channel. As stated hereinabove, if a key is shared with the ME 306, it is 
desirable to change that key often. This is due to the risk of a non-subscriber 
accessing information stored in memory storage unit MEM 310 and thus 
allowing access to a controlled or partially controlled service. The ME 306 
stores SK, i.e., key information used for decrypting broadcast content, in 
memory storage unit MEM 310. The CS sends sufficient information for 
subscribed users to compute SK. !f the ME 306 of a subscribed user could 
compute SK from this information, then additional information required to 
compute SK cannot be secret. In this case, assume that the ME 306 of a non- 
subscribed user could also compute SK from this information. Hence, the value 
of SK must be computed in the SUPU 316, using a secret key shared by the CS 
and SUMU 314. The CS and SUMU 314 share the value of RK, however each 
user has a unique value of RK. There is insufficient time for the CS to encrypt 
SK with every value of RK and transmit these encrypted values to each 
subscribed user. 

[1075] With respect to subscription, to ensure the efficient distribution of the 
security information SK, the CS periodicaily distributes a common Broadcast 
Access Key (BAK) to each subscriber UIM 308. For each subscriber, the CS 
encrypts BAK using the corresponding RK to obtain a value called BAKI 
Information (BAKI). The CS sends the corresponding BAKI to MS 300 of the 
subscribed user. For example, BAK may be transmitted as an IP packet 
encrypted using the RK corresponding to each MS. In the exemplary 
embodiment, BAKI is an IPSec packet containing BAK that is encrypted using 
RK as the key. Since RK is a per-user key, the CS must send the BAK to each 
subscriber individually; thus, the BAK is not sent over the broadcast channel. 
The MS 300 passes the BAKI to the UIM 308. The SUPU 316 computes BAK 
using the value of RK stored in SUMU 314 and the value of BAKI. The value of 
BAK is then stored in the SUMU. In the exemplary embodiment, the BAKI 
contains a SPI value denoted SPLRK that corresponds to the security 
association that contains RK. The MS 300 knows that the UIM 308 can decrypt 
the payload when the IPSec packet is encrypted according to this security 
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association. Consequently, when the MS 300 receives an IPSec packet 
encrypted according to this security association, MS 300 passes BAKI to the 
UIM 308, and instructs the UIM 308 to use the RK to decrypt the payload. 
[1076] The period for updating the BAK is desired to be sufficient to allow the 
CS to send the BAK to each subscriber individually, without incurring significant 
overhead. Since the ME 308 is not trusted to keep secrets for a long time, the 
DIM 308 does not provide the BAK to the ME 306. The other parameters of the 
security association between the CS and group of subscribers must also be 
negotiated. In one embodiment, these parameters are fixed, while in another 
embodiment, these parameters may be sent to the MS as part of the BAKI. 
While the BAK is kept as a secret in the UIM 308, other parameters of the 
security association may be kept in the ME 306. In one embodiment, in which 
SK is sent to the MS 300 as an IPSec packet encrypted using BAK, the CS 
provides the subscribers with an SPl used to index the security association and 
this SPl is denoted SPLBAK. 

[1077] The following paragraph discusses how the SK is updated following a 
successful subscription process. Within each period for updating the BAK, a 
short-term interval is provided during which SK is distributed on a broadcast 
channel. The CS uses a cryptographic function to determine two values SK and 
SKI (SK Information) such that SK can be determined from BAK and SKI. For 
example, SKI may be the encryption of SK using BAK as the key. In one 
exemplary embodiment, SKI is an IPSec packet in which the payload contains 
the value of SK encrypted using BAK as the key. Alternatively, SK may be the 
result of applying a cryptographic hash function to the concatenation of the 
blocks SKI and BAK. The CS ideally ensures that the values of SK cannot be 
predicted in advance. If SK can be predicted in advance, then an attacker, i.e., 
illegitimate accessing entity, can send the predicted values of SK to un- 
subscribed users. 

[1078] As an example, suppose N values of SK are to be used over a 24- 
hour period. If SK is predicted with 100% accuracy, the attacker need only ask 
the UIM to compute the N keys. The attacker then makes the N keys available 
to un-subscribed users. The un-subscribed users can download the keys at the 
beginning of each day and access the HSBS service with little cost or 
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inconvenience. If the attacker is only able to predict SK with 50% accuracy, 
then the attacker needs to send approximately 2N keys. As the accuracy of the 
predictions decreases, the number of keys to be generated by the attacker 
increases. An attacker can be dissuaded from distributing the predictions to SK 
by ensuring that the cost of generating, storing and distributing the predictions 
exceeds the benefit of providing illegitimate access. Attackers may be 
discouraged by ensuring that the accuracy of any prediction by the attacker is 
sufficiently small, thus increasing the number of keys the attacker will generate 
to the point where the cost of providing illegitimate access exceeds the benefit. 
Consequently, any scheme for generating SK Ideally ensures that the best 
predictions of an attacker have sufficiently small accuracy. That is, the 
computation of SK should include some random value that can only be 
predicted in advance with small accuracy. 

[1079] In an exemplary embodiment where SK is in an encrypted form, the 
CS can choose SK using a random or pseudo-random function. In alternate 
embodiments, wherein SK is derived by applying a cryptographic function to SKI 
and BAK, the CS introduces an unpredictable value when forming SKI. Some 
portion of SKI may be predictable. For example, a portion of SKI may be 
derived from the system time during which this SKI is valid. This portion, 
denoted SKLPREDICT, may not be transmitted to the MS 300 as part of the 
broadcast service. The remainder of SKI, SKLRANDOM may be unpredictable. 
That is, SK_RANDOM Is predicted with small accuracy. The SKLRANDOM is 
transmitted to the MS 300 as part of the broadcast service. The MS 300 
reconstructs SKI from SKLPREDICT and SKLRANDOM and provides SKI to 
UIM 308. The SKI may be reconstructed within the UIM 308. The value of SKI 
changes for each new SK. Thus, either SKLPREDICT and/or SKLRANDOM 
changes when computing a new SK. 

[1080] The CS sends SKLRANDOM to BS for broadcast transmission. The 
BS broadcasts SKLRANDOM, which is detected by the antenna 302 and 
passed to the receive circuitry 304. Receive circuitry 304 provides 
SKLRANDOM to the MS 300, wherein the MS 300 reconstructs SKI. The MS 
300 provides SKI to UIM 308, wherein the UIM 308 obtains the SK using the 
BAK stored in SUMU 314. The SK is then provided by UIM 308 to ME 306. 
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The ME 306 stores the SK in memory storage unit, MEM 310. The ME 306 
uses the SK to decrypt broadcast transmissions received from the CS. 
[1081] The CS and BS agree on some criteria for when SKLRANDOM is to 
be transmitted. The CS may desire to reduce the intrinsic monetary value in 
each SK by changing SK frequently. In this situation, the desire to change 
SK1_RAND0M data is balanced against optimizing available bandwidth. In 
some exemplary embodiments, SKLRANDOM is sent with the encrypted 
content. This allows the MS 300 to generate SK and start decrypting 
immediately. !n many situations, this will waste bandwidth. An exception is a 
scheme in which SKLRANDOM is sent as parameters of the communication. 
For example, the SPI value in iPSec is allowed to vary, and can be exploited to 
include an SKLRANDOM value, as discussed in further detail hereinbelow. 
[1082] In other embodiments, SKLRANDOM is sent separate from the 
encrypted content. The SKLRANDOM may even be transmitted on a channel 
other than the broadcast channel. When a user "tunes" to the broadcast 
channel, the receive circuitry 304 obtains information for locating the broadcast 
channel from a "control channel." It may be desirable to allow quick access 
when a user "tunes" to the broadcast channel. This requires the ME 306 to 
obtain SKI within a short amount of time. The ME 306 may already know 
SKLPREDICT, however, the BS provides SKLRANDOM to ME 300 within this 
short amount of time. For example, the BS may frequently transmit 
SKLRANDOM on the control channel, along with the information for locating 
the broadcast channel, or frequently transmit SKLRANDOM on the broadcast 
channel. The more often that the BS "refreshes" the value of SKLRANDOM, 
the faster the MS 300 can access the broadcast message. The desire to 
refresh SKLRANDOM data is balanced against optimizing available bandwidth, 
as transmitting SKLRANDOM data too frequently may use an unacceptable 
amount of bandwidth in the control channel or broadcast channel. 
[1083] In some situations the CS may choose to use values of 
SKLPREDICT and SKLRANDOM wherein both change for every value of SK 
produced. In other situations the CS may wish to reduce the number of times 
that SKLRANDOM changes, so that the MS 300 does not have to obtain 
SKLRANDOM so often. For example, if a user changes frequently between 
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multiple HSBS channels, then it would be better if the value of SKI_RANDOM 
were unlikely to change in the five minutes during which the user is tuned to 
another channel. If SKLi=[ANDOM changed then the user would have to wait 
until the new value of SKLRANDOM is broadcast, indicating that such a 
scheme would be more "user-friendly" if SKI_RANDOM remains constant for as 
long as possible. The CS may wish to use multiple values of SK during the 
lifetime of an SKI_RANDOM value, by using a value for SKLPREDICT that will 
have changed whenever the CS wishes to change SK. One example uses 
system time; however, using system time introduces additional problems 
regarding synchronization. 

[1 084] With respect to encryption and transmission of the broadcast content, 
the CS encrypts the broadcast content using the current SK. The exemplary 
embodiment employs an encryption algorithm such as the Advanced Encryption 
Standard (AES) Cipher Algorithm. In the exemplary embodiment, the encrypted 
content is then transported by an IPsec packet according to the Encapsulating 
Security Payload (ESP) transport mode discussed hereinbelow. The IPsec 
packet also contains an SPI value that instructs the ME 306 to use the current 
SK to decrypt received broadcast content. The encrypted content is sent via the 
broadcast channel. 

[1085] Receive circuitry 304 provides the RKI and BAKI directly to the UIM 
308. Further, if the CS computes SK from SKLRANDOM and SKLPREDICT 
values, then receive circuitry 304 provides the SKLRANDOM to an appropriate 
part of the MS 300 where it is combined with SKLPREDICT to obtain SKI. In 
one embodiment, SKI is attached to the encrypted message, and is extracted by 
the ME 306. The SKI is provided to the UIM 308 by the relevant part of the MS 
300. The UIM 308 computes RK from the RKI and A-key, decrypts the BAKI 
using the RK to obtain BAK, and computes the SK using the SKI and BAK, to 
generate an SK for use by the ME 306. The ME 306 decrypts the broadcast 
content using the SK. The UIM 308 of the exemplary embodiment may not be 
sufficiently powerful for decryption of broadcast content in real time, and, 
therefore, SK is passed to the ME 306 for decrypting the broadcast. 
[1086] FIG. 58 illustrates the transmission and processing of keys, including 
RK, BAK and SK, according to an exemplary embodiment. As illustrated, at 
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registration, the MS 300 receives the RK Information (RKl) and passes it to UIIVl 
308, wherein the SUPU 316 computes RK using RKl and the A-key, and stores 
the RK in UIIVl memory storage SUMU 314. The MS 300 periodically receives 
the BAK Information (BAKI) that contains BAK encrypted using the RK value 
specific to UIM 308. The encrypted BAKI is decrypted by SUPU 316 to recover 
the BAK, which is stored in UIM memory storage SUMU 314. The MS 300 
further periodically obtains SKI. In some exemplary embodiments, the MS 300 
receives an SKLRANDOM that it combines with SKI_PREDICT to form SKI. 
The SUPU 316 computes SKfrom SKI and BAK. The SK is provided to ME 306 
for decrypting broadcast content. 

[1087] In the exemplary embodiment the CS keys are not necessarily 
encrypted and transmitted to the MSs; the CS may use an alternative method. 
The key information generated by the CS for transmission to each MS provides 
sufficient information for the MS to calculate the key. As illustrated in the 
system 350 of FIG. 6, the RK is generated by the CS, but RK Information (RKl) 
is transmitted to the MS. The CS sends information sufficient for the UIM to 
derive the RK, wherein a predetermined function is used to derive the RK from 
transmitted information from the CS'. The RKl comaihssufficTem information- for 
the MS to determine the original RK from the A-key and other values, such as 
system time, using a predetermined public function labeled d1 , wherein: 

RK = d1 (A-key, RKl). (3) 
[1088] In the exemplary embodiment, the function d1 defines a 
cryptographic-type function. According to one embodiment, RK is determined 
as: 

RK = SHA'(A-key II RKl ), (4) 
wherein "II" denotes the concatenation of the blocks containing A-key and RKl, 
and SHA'(X} denotes the last 128-bits of output of the Secure Hash Algorithm 
SHA-1 given the input X. In an alternative embodiment, RK is determined as: 

RK = AES(A-key,RKI), (5) 
wherein AES(X,Y) denotes the encryption of the 128-bit block RKl using the 
128-bit A-key. In a further embodiment based on the AKA protocol, RK is 
determined as the output of the 3GPP key generation function f3, wherein RKl 
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includes the value of RAND and appropriate values of AMF and SQN as defined 
by tfie standard. 

[1089] The BAK is treated in a different manner because multiple users 
having different values of RK must compute the same value of BAK. The CS 
may use any technique to determine BAK. However, the value of BAKI 
associated with a particular UIM 308 must be the encryption of BAK under the 
unique RK associated with that UIM 308. The SUPU 316 decrypts BAKI using 
RK stored in the SUMU 314 according to the function labeled d2, according to: 

BAK = d2{BAKI, RK). (6) 
[1090] In an alternate embodiment, the CS may compute BAKI by applying 
a decryption process to BAK using RK, and the SUPU 316 obtains BAK by 
applying the encryption process to BAKI using RK. This is considered 
equivalent to the CS encrypting BAK and the SUPU 316 decrypting BAKI. 
Alternate embodiments may implement any number of key combinations in 
addition to or in place of those illustrated in FIG. 6. 

[1091] The SK is treated in a similar manner to RK. In some embodiments, 
SKI is first derived from the SKLPREDICT and SK!_RANDOM, wherein 
SKLRANDdM"is"llTe~"iiiformation transmitted from CS to MS. Then a 
predetermined function labeled d3 is used to derive the SK from SKi and BAK 
(stored In the SUMU 314), according to: 

SK = d3(BAK,SKI). (7) 
[1092] In one embodiment, the function d3 defines a cryptographic-type 
function. In an exemplary embodiment, SK is computed as: 

SK = SHA{BAKI1 SKI), (8) 
while in another embodiment, SK is computed as 

SK = AES( BAK, SKI ). (9) 
[1093] A method of providing the security for a broadcast message is 
illustrated in FIGs. 7A-7D. FIG. 7A illustrates a registration process 400 
wherein a subscriber negotiates registration with the CS at step 402. The 
registration at step 404 provides the UIM a unique RK. The UIM stores the RK 
in a Secure Memory Unit (SUMU) at step 406. FIG. 7B illustrates subscription 
processing 420 between a CS and a MS. At step 422 the CS generates a BAK 
for a BAK time period T1 . The BAK is valid throughout the BAK time period T1 , 
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wherein the BAK is periodically updated. At step 424 the CS authorizes the 
UIM to have access to the Broadcast Content (BC) during the BAK tinner period 
T1 . At step 426 the CS encrypts the BAK using each individual RK for each 
subscriber. The encrypted BAK is referred to as the BAKI. The CS then 
transmits the BAKI to the UIM at step 428. The UIM receives the BAKI and 
performs decryption using the RK at step 430. The decrypted BAKI results in 
the originally generated BAK. The UIM stores the BAK in a SUMU at step 432. 
[1094] When the user subscribes to the broadcast service for a particular 
BAK update period, the CS sends the appropriate information BAKI, wherein 
BAKI corresponds to the BAK encrypted with the RK. This typically occurs prior 
to the beginning of this BAK update period or when the MS first tunes to the 
broadcast channel during this BAK update period. This may be initiated by the 
MS or CS according to a variety of criteria. Multiple BAKI may be transmitted 
and decrypted simultaneously. 

[1095] Note that when expiration of the BAK update period is imminent, the 
MS may request the updated BAK from the CS if the MS has subscribed for the 
next BAK update period. In an alternate embodiment the first timer t1 is used 
by the CS, where upon expiration of the timer, i.e., satisfaction of the BAK 
update period, the CS transmits the BAK. The CS may change the value of 
BAK earlier than originally intended. This may be desirable if, for example, the 
current value of BAK is publicly disclosed. 

[1096] Note that it is possible for a user to receive a BAK during a BAK 
update period, wherein, for example, a subscriber joins the service mid-month 
when the BAK updates are performed monthly. Additionally, the time periods 
for BAK and SK updates may be synchronized, such that all subscribers are 
updated at a given time. 

[1097] FIG. 8A illustrates the registration process in a wireless 
communication system 500 according to the exemplary embodiment. The CS 
502 negotiates with each subscriber, i.e., MS 512, to generate a specific RK to 
each of the subscribers. The RK is provided to the SUMU unit within the UIM of 
each MS. As illustrated, the CS 502 generates RKi that is stored in SUMUi 510 
within UIMi 512. Similarly, the CS 502 generates RK2 and RKn which are 
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Stored in SUMU2 520 within UIM2 522 and SUMUn 530 within UIMn 532, 
respectively. 

[1098] FIG. 8B illustrates the subscription process in the system 500. The 
CS 502 further includes multiple encoders 504. Each of the encoders 504 
receives one of the unique RKs and the BAK value generated in the CS 502. 
The output of each encoder 504 is a BAKI encoded specifically for a subscriber. 
The BAKI is received at the UIM of each MS, such as UIM1 512. Each UIM 
includes a SUPU and a SUMU, such as SUPUi 514 and SUMU1 510 of UIM1 
512. The SUPU includes a decoder, such as decoder 516 that recovers the 
BAK by application of the RK of the UIM. The process is repeated at each 
subscriber. 

[10991 FIG. 8D illustrates the processing of BC after registration and 
subscription. The CS 502 includes an encoder 560 that encodes the BC using 
the current SK to generate the EBC. The EBG is then transmitted to the 
subscribers. Each MS includes an encoder, such as encoder 544, that extracts 
the BC from the EBC using the SK. 

[1 100] The following description considers four exemplary embodiments that 
rhay be~u~s"ed'to~"update'SK and broadcast the cdntent. In the first exemplary 
embodiment, SK is derived from BAK and the SPI value in the header of the 
IPSec packets containing the broadcast content. In the second exemplary 
embodiment, SK is derived from BAK, a broadcast random value denoted 
RAND and the SPI value in the header of the IPSec packets containing the 
broadcast content. In the third exemplary embodiment, SK is derived from BAK, 
system time and a broadcast random value denoted SK_RAND. In the fourth 
exemplary embodiment, SK is sent as an IPSec packet encrypted using BAK. 
Still further embodiments may provide SK as a combination of the above listed 
embodiments, or using another mechanism to provide the SK to the MS often 
enough to discourage unauthorized access to the broadcast service. 
[1101] As the Short-term Key (SK) is used to encrypt and decrypt the 
broadcast content, and is stored in memory that may be vulnerable to 
unauthorized access, wherein the SK is typically changed frequently. A 
problem exists as to how to change the SK frequently while balancing the 
following four objectives: 1) to minimize the SK update waiting time or blackout 
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period, for a mobile station that has recently tuned to the broadcast; 2} to 
minimize the amount of bandwidth used to update the SK value; 3} to increase 
the level of security; and 4) to increase the ease with which the SK can be 
incorporated with IPSec. Frequent updates may reduce the blacl<out period but 
at the expense of requiring more bandwidth to send frequent updates. 
[1102] One solution provides a method for providing sufficient information for 
performing SK updates in each encrypted broadcast content pacl^et without 
using any additional bandwidth. Therefore, the blacicout period may be 
minimized without necessarily incurring additional bandwidth requirements. The 
four exemplary embodiments described herein for performing an SK update 
have various advantages and disadvantages. All four embodiments provide 
methods that are sufficiently secure. The first embodiment eliminates the block 
out period and uses no additional bandwidth to update the SK value. The other 
embodiments may incur a blaclcout period during times of high usage. The first 
embodiment is also easily incorporated with IPSec. 

[1103] According to the first embodiment for performing an SK update, the 
above mentioned problems are solved by defining the SK that encrypts a given 
IPSecpacRet as a function of the Broadcast "Access Key (BAK) and the SPlin 
the ESP header. In this way, rather than providing the SK in a separate stream, 
the SK is computed from the content stream. Assuming that the MS has 
already received the BAK as described hereinabove, the MS is able to 
immediately compute the SK for each content packet without having to wait for 
some additional SK update information. This effectively eliminates any SK 
update wait time for a new broadcast recipient. As soon as the MS receives a 
content packet, the MS can immediately determine the SK and decrypt the 
content. 

[1104] Information sufficient to calculate the SK at the MS is provided in the 
IPSec packet. The IPSec packet utilizes an IP Encapsulating Security Payload 
(ESP) and is specified in RFC 1827 entitled "IP Encapsulating Security Payload 
(ESP)" by R. Atkinson in August 1995, as mentioned above herein. ESP is a 
mechanism for providing integrity and confidentiality to IP datagrams. In some 
circumstances it can also provide authentication to IP datagrams. FIG. 9A 
illustrates an iPSec packet 600, including an IP header 602, an ESP header 
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604, and a payload 606, according to one embodiment. The Encapsulating 
Security Payload (ESP) may appear anywliere after tine IP iieader and before 
the final transport-layer protocol. Generally, the ESP consists of an 
unencrypted header followed by encrypted data. 

[1105] The ESP header field 604 includes a Security Association Identifier, 
referred to as the SPI. According to the first embodiment described 
hereinabove, the IPSec packets containing the broadcast content include an 
SPI related to the SK, labeled SPLSK. FIG. 9B illustrates the format of the 
corresponding 32-bit SPI_SK 610. The SPLSK 610 is decomposed into two 
parts: SPLRAND 612 and BAKJD 614. The SPLRAND 612 is a random 
number that is statistically random, and is also used to compute the SK that is 
used to encrypt and decrypt the corresponding broadcast content or payload. 
The SPLRAND parameter allows the Content Server (CS) to frequently change 
the effective SK value for the content by changing the SPLRAND value, thus 
providing the MS the parameter needed to compute the SK value immediately. 
Furthermore, SPLRAND fulfills the role of SKLRANDOM, discussed 
hereinabove. The randomness of SPLRAND ensures that an attacl<er cannot 
predict the values of SK" with" high accuracy. Since 1he SPI is"already a 
standard parameter in IPSec encrypted packets, i.e., is specified for the ESP, 
the present embodiment does not incur the additional bandwidth typically 
associated with transmitting the SK as a separate stream. The BAKJD 
indicates which BAK value to use for computation of the SK value. In one 
embodiment the BAKJD is a four bit tag, wherein each tag is associated with a 
BAK value. When the MS performs a subscription, the MS stores each received 
BAKJD and the corresponding BAK value in a memory storage unit. According 
to one embodiment the MS includes a Loolt Up Table (LUT) for storing the BAK 
value(s) identified with each corresponding BAKJD{s). The BAK LUT is 
contained in the secure memory in the UIM. 

[1106] FIG. 9D illustrates a BAK LUT 630. Each entry in the LUT 630 
identifies the BAK„iD, the corresponding BAK value, and the expiration of the 
validity of the combination. The expiration is introduced due to the small 
number of values of BAKJD. Alternate embodiments may avoid the use of 
expiration values in the BAK LUT. In one embodiment, only 16 values of 
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BAKJD are used. If a new BAK is issued every month, then the value of 
BAK„ID must repeat after 16 months. At that time, there may be confusion as 
to which value of BAK is valid. The expiration provides a time-out period after 
which a new entry replaces the expired entry. The BAK LUT may need to store 
more than one value of BAK. One reason for this is that the CS may wish to 
send BAK values to the MS before they become valid. Additionally, the CS 
may wish to have multiple BAK values that are valid at the same time, wherein 
different BAK values may be used to compute different SK values. If the BAK 
LUT does not contain a current BAK corresponding to the BAKJD, then the MS 
may perform a subscription to retrieve the valid BAK. 

[1107] After extracting SP[_RAND and BAK_ID from the SP[_SK, and 
retrieving BAK corresponding to BAKJD, the DIM computes the value of SK 
from BAK and SPLRAND using a cryptographic function g: 

SK = g{ BAK, SPLRAND). (10) 
[1108] In one embodiment, the function g{ BAK, SPLRAND) corresponds to 
encryption of SPLRAND padded to 128-bit bits with zeroes, using the AES 
encryption algorithm with BAK as the key: 

SK = AES{ BAK, SPLRAND). (11) 
[1109] In another embodiment, the function g( BAK, SPi_RAND) 
corresponds to computing the 128 least significant bits of the output of SHA-1 
applied to the concatenation of BAK and SPLRAND: 

SK = SHA( BAK, SPLRAND). (12) 
[1110] In this way, it is not necessary for the UIM to compute the value of SK 
for each packet received by the MS. The MS stores each of the SPLSK values 
with the corresponding SK values in a memory storage unit, such as a Look Up 
Table (LUT). The MS may store the SPI_SK and SK values as a security 
association in the Security Association Database (SAD): an LUT in which the 
MS stores typical security associations required for other applications. The 
security associations are indexed according to the destination address and SPI. 
When a new SK is generated from a new value of SPLSK, the old security 
association is replaced by the new security association containing the new 
values of SPLSK and SK. Alternatively, the MS may store the SPLSK and SK 
values in a SK_LUT, with one SK_LUT allocated to each broadcast channel. 
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FiG. 9C illustrates an SK LUT 620. Each entry in the LUT 620 identifies the 
SPLSK and the corresponding SK value. When the MS receives a broadcast 
content packet, the ME first checks the SAD or SK LUT to see if the table 
contains an SP1_SK value equal to the SPI of the received packet. If the table 
contains such a value, then the ME uses this value, othenwise the UIM 
computes the new value of SK. The CS may also have a BAK LUT, SAD or 
SK_LUT. 

[1111] FlGs. 10 and 11 illustrate one embodiment for performing an SK 
update. FIG. 10 illustrates method 700 of operation of the CS. For each IP 
packet, the CS determines the BAK that will be used to derive SK, and 
determines the BAKJD corresponding to the BAK at step 702. The BAKJD 
may be any type of identifier that allows discrimination among multiple BAK 
values. The CS sends BAK and the BAKJD to individual users by performing 
subscription at step 706. The users may perform subscription at various times 
before and during the subscription period. Steps 702 and 706 may occur 
before the subscription period starts. At step 710 the CS chooses a random 
value for the SPLBAND value. If the BAK„ID is represented using b bits, then 
the SPllRAND is fepreserifed usihg (32-f?; bits: The SPI_RAND value should 
not be repeated during the lifetime of one BAK. Once the SPLRAND and 
BAKJD are known, the CS combines them (i.e., concatenates BAKJD to the 
SPLRAND) to form the SPLSK at step 712. At step 714, the CS forms SK by 
using a cryptographic function to combine SPLRAND with the BAK 
corresponding to BAK_ID to form SK. The CS then encrypts the broadcast 
message or portion of the message with SK at step 716, and sends the 
encrypted message at step 71 8. Note that the encrypted broadcast message is 
part of an IP packet that includes the IP header and the ESP header. The ESP 
header includes the SPLSK. At decision diamond 720, the CS decides whether 
to change SK. If the CS decides not to change SK, then the CS proceeds to 
step 716. If the CS decides to change SK, then the CS proceeds to decision 
diamond 724, where the CS decides whether to change BAK. If the CS decides 
not to change BAK, then the CS proceeds to step 710. If the CS decides to 
change BAK, then the CS proceeds to stop 702. 
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[1112] FIG. 11 illustrates the corresponding operation at the receiver, such 
as a MS. The method 750 initiates when the receiver receives the IP packet 
including the SPLSK in the ESP header at step 752. Note that the receiver 
extracts the SPLSK Information from the IP packet. Upon receipt of the 
SPLSK, the receiver first checks if the SK corresponding to the received 
SPLSK value is stored in memory. 

[1113] in one embodiment, the SPLSK is stored In an SK LUT stored in the 
ME 306 unit of FIG. 4 and in another embodiment, the SPLSK is stored in the 
security association database: both of these tables are denoted in FIG. 1 1 by 
SPI table. The check of the SPl table is performed at decision diamond 754. If 
the SK value is stored in memory at the receiver, the receiver is able to decrypt 
the payload of the content packet using the stored SK value at step 756. If the 
receiver does not have the SK value stored in memory, the receiver extracts 
BAK_ID and SPLRAND from SPLSK at step 758. At Step 760, the receiver 
then checks if the BAK LUT has a valid BAK entry corresponding to BAKJD. If 
the BAK LUT does have a valid BAK corresponding to BAK_ID, then the 
receiver selects this value and proceeds to step 764. If the BAK LUT does not 
have a valid BAK corresponding to BAK_ID, such as when the user wishes to 
subscribe for this period, then the receiver performs a subscription to obtain the 
valid BAK as shown at step 762. The new BAK is stored with BAKJD in the 
BAK_LUT and the receiver proceeds to step 764. The receiver combines the 
BAK corresponding to the BAKJD value, i.e., BAK_ID In the received SPLSK, 
and the SPI_RAND value (also in the received SPLSK) to compute the new SK 
at step 764. The receiver then uses the new SK value to decrypt the payload of 
the content packet at step 766. The receiver also stores this SK value indexed 
by the corresponding SPLSK and possibly the destination address of the IPSec 
packets. 

[1114] The SK is computed directly from knowledge of the BAK and the 
SPLSK value in the content packet. The BAK changes less frequently than the 
SK, e.g., BAK may change once a month. Therefore, the receiver is able to 
determine the SK value immediately from the content packets without additional 
delay and without requiring more bandwidth to send the SK update. 
[1115] According to one embodiment, the SK calculation is given as; 
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SK=f(SPLSK, BAK), (13) 
wherein the function is defined as encryption of the SPI_SK using the BAK. 
As the SPI_SK is made up of tlie SPI_I=IAND and the BAKJD, Equation (13) 
may also be given as: 

SK=/(SPi_RAND, BAKJD). (14) 
[1116] The second exempiary embodiment for performing an SK update 
introduces an additional aspect of randomness to the computation of SK, 
wherein SK is defined as a function of BAK, SPLRAND, and an additional 
parameter, RAND. The RAND parameter is l<ept constant for several SK 
values. The RAND allows more different values of SK to be derived from a 
single BAK value by changing both SPi„RAND and RAND. If no RAND is used 
then there are at most 2^^ values of SK that can be derived from a singie BAK 
by varying the SPi. However, if a 96-bit RAND is used, then there can be up to 
2^^^ vaiues of SK that can be derived from a single BAK by varying both 
SPLRAND and RAND. (These numbers do not account for bits of the SPI that 
are used to represent BAK_ID). Now, rather than the SPLSK identifying only 
the BAK, the SPI_SK must also contain information to identify the RAND. To 
implement the RAND value, the SPLSK is forrhulated in three parts: IJlhe 
BAKJD to identify the BAK value to use; 2) the RAND_ID to identify the RAND 
value to use; and 3) the SPLRAND value to provide the frequently changing 
randomness in the SPLSK. 

[1117] FIG. 12A illustrates an SPLSK 800 portion of an IP packet, including 
an SPi_RAND 802, a BAKJD 804, and a RANDJD 806. The SPi_RAND 802 
and BAKJD 804 are as described hereinabove. To maintain the SPLSK to a 
predetermined or specified bit length, the SPLRAND 802 may use fewer bits 
than SPLRAND 612 as in FIG. 9B to allow bits for the RANDJD 806. The 
RAND_ID 806 corresponds to the RAND value used for calculation of the SK, 
and may be a four bit tag or other identifier. The RANDJD(s) and 
corresponding RAND value(s) are stored in a LUT at the receiver. FIG. 12B 
illustrates a RAND LUT 820. The RAND LUT 820 includes an entry for each 
RAND value listing the RAND_ID and expiration associated with the RAND 
value. 
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[1118] FIG. 13 illustrates operation of the CS. For each IP packet, the 
transmitter determines the BAK that will be used to derive SK, and determines 
the BAKJD corresponding to the BAK at step 902. The BAKJD may be any 
type of identifier that allows discrimination among multiple BAK values. The CS 
sends BAK and the BAK_ID to individual users by performing subscription at 
step 904. The users may perform subscription at various times before and 
during the subscription period. Steps 902 and 904 may occur before the 
subscription period starts. At step 906 the transmitter selects a RAND value 
and determines the corresponding RAND_ID. The CS may send RAND and 
RANDJD to the MS individually or send RAND and RAND_ID to be broadcast 
on the broadcast channel, The value of RAND does not need to be secret, so it 
is not encrypted. If RAND and RAND_tD are broadcast, then there should not 
be much time between re-transmission so that an MS does not need to wait 
long before obtaining the RAND value. Broadcasting RAND and RAND_1D will 
use a large amount of bandwidth over time. However, if there are a large 
number of users tuned to the channel, then a large amount of bandwidth will be 
required to send RAND to each user individually. Consequently, RAND and 
RAND„ID'should onry"be broadcast if there are a large number of users tuned 
to the channel. At step 910 the CS chooses a random value of SPLRAND. 
[1119] Once the SPLRAND, BAKJD and RANDJD are known, the 
transmitter combines them (e.g., concatenates RAND„ID and BAK_ID to the 
SPLRAND) to form the SPLSK at step 912. The CS uses a cryptographic 
function to combine SPLRAND, BAK {identified by BAKJD) and RAND 
(identified by RANDJD) to form SK. The CS then encrypts the broadcast 
message or portion of the message with SK at step 916, and transmits the 
encrypted message at step 918. Note that the encrypted broadcast message is 
part of an IP packet that includes the IP header and the ESP header. The ESP 
header includes the SPLSK. At decision diamond 920, the CS decides whether 
to change SK. If the CS decides not to change SK, then the CS proceeds to 
step 916. If the CS decides to change SK, then the CS proceeds to decision 
diamond 922, where the CS decides whether to change RAND. If the CS 
decides not to change RAND, then the CS proceeds to step 910. If the CS 
decides to change RAND, then the CS proceeds to decision diamond 924, 
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where the CS decides whether to change BAK. If the CS decides not to change 
BAK, then the CS proceeds to step 906. If the CS decides to change BAK, then 
the CS returns to step 902. 

11120] FIG. 14 illustrates the corresponding operation at the receiver, such 
as a MS. The method 950 initiates when the receiver receives the IP packet 
including the SPI_SK in the ESP header at step 952. Note that the receiver 
extracts the SPLSK information from the IP packet. Upon receipt of the 
SPLSK, the receiver first checks if the SK corresponding to the received 
SPLSK value is stored in memory at decision diamond 952. In one 
embodiment, the SPI_SK is stored in an SK LUT is stored in the ME unit 306 of 
FIG. 4, and in another embodiment, the SPI_SK is stored in the security 
association database: both of these tables are denoted in FIG. 14 as the SPI 
table. The check of the SK LUT is performed at decision diamond 954. If the 
SK value is stored in memory at the receiver, the receiver is able to decrypt the 
payload of the content packet using the stored SK value at step 956. If the 
receiver does not have the SK value stored in memory, the receiver extracts 
BAK_ID and SPLRAND from SPLSK at step 958. At step 960, the receiver 
then checks if the BAK LUT has a valid BAK entry corresponding to BAK_ID. If 
the BAK LUT does have a valid RAND corresponding to BAKJD, then the 
receiver selects this value and proceeds to step 964. If the BAK LUT does not 
have a valid BAK corresponding to BAKJD, then (provided the user wishes to 
subscribe for this period) the receiver performs a subscription to obtain the valid 
BAK as shown in step 962. The new BAK is stored with BAK_ID in the 
BAK_LUT and receiver proceeds to step 864. At step 964, the receiver then 
checks if the RAND LUT has a valid RAND entry corresponding to RAND_ID. If 
the RAND LUT does have a valid BAK corresponding to RANDJD, then the 
receiver selects this value and proceeds to step 964. If the RAND LUT does not 
have a valid RAND corresponding to RAND_ID, then the receiver obtains RAND 
and RANDJD either by requesting the value from the CS or from the broadcast 
as shown in step 966. The new RAND is stored with RAND_ID in the 
RAND_LUT and the receiver proceeds to step 968. The receiver combines the 
BAK corresponding to the BAKJD value (i.e., BAK_ID in the received SPLSK), 
the RAND corresponding to the RANDJD (i.e., RANDJD in the received 
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SPLSK) and the SPLRAND value (also in the received SPLSK) to compute 
the new SK at step 968. The receiver then uses the new SK value to decrypt 
the payload of the content packet at step 970. The receiver also stores this SK 
value indexed by the corresponding SPLSK and possibly the destination 
address of the IPSec packets. 

[1121] The RAND is changed less frequently than SPLRAND. The RAND 
value is common to all mobile stations listening to the broadcast. Therefore, the 
RAND value may be broadcast to all mobile stations and is not necessarily 
encrypted specifically per receiver. Therefore, if there are enough mobile 
stations listening to the broadcast stream, it is more efficient for the air interface 
to broadcast the RAND value a few times to all these mobile stations rather than 
require each mobile station to individually request the RAND values from the 
CS. 

[1122] According to one embodiment, the SK calculation is given as: 

SK=/{SPLSK, BAK, RAND), (15) 

wherein the function is defined as encryption of the SPI_SK using the BAK. 

As the SPLSK is made up of the SPLRAND, the BAKJD, and the RANDJD, 

Equation (15) may also be given as: 

SK=/(SPLRAND, BAKJD, RANDJD, RAND). (16) 

[1123] Note that the use of a RAND value may introduce some "blackout 
periods" because the receiver needs to receive the RAND value on a change. 
However, these periods are less frequent than when the SK is updated on a 
separate stream and the receiver waits for the periodic updates. The RAND is 
designed to change more slowly than the SK value, and therefore, the updates 
to the RAND are not sent as frequently. The CS would also like to reduce the 
probability of a "blackout" resulting when an MS stops listening to the channel 
due to a lost signal, tuning to another channel, or responding to an interruption, 
such as a phone call. The blackout is most likely to occur at the beginning of 
the lifetime of a RAND value. To counter this, the CS may re-broadcast the new 
RAND more frequently around the time when the new RAND value becomes 
valid. At the end of the lifetime of a RAND, it may become necessary to 
broadcast both the value of the current RAND and the value of the next RAND. 
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The values of RAND should not be predictable, and the CS should begin 
sending RAND only a short time before RAND becomes valid. 
[1124] As discussed hereinabove, according to the third exemplary 
embodiment, SK is derived from BAK, system time and a broadcast random 
value denoted SK_RAND. FIG. 7C illustrates a method of updating keys for 
security encryption in a wireless communication system supporting broadcast 
service. The method 440 implements time periods as given in FIG. 7E. The 
BAK is updated periodically having a time period T1 . A timer t1 is initiated when 
BAK is calculated and times out at T1 . A variable is used for calculating the SK 
referred to as SK_RAND, which is updated periodically having a time period T2. 
A timer t2 is initiated when the SK_RAND is generated and times out at T2. In 
one embodiment, the SK is further updated periodically having a period of T3. 
A timer t3 is Initiated when each SK is generated and time out at time T3. The 
SK_RAND is generated at the OS and provided periodically to the MS. The MS 
and the CS use SK_RAND to generate the SK, as detailed hereinbelow. 
[1125] A first timer t1 is reset when the applicable value of BAK is updated. 
The length of time between two BAK updates is the BAK update period. In the 
exemplary embodiment the BAK update period is a month, however, alternate 
embodiments may implement any time period desired for optimum operation of 
the system, or to satisfy a variety of system criteria. 

[1126] Continuing with FIG. 7C, the method 440 initializes the timer t2 at 
step 442 to start the SK_REG time period T2. The CS generates SK_RAND 
and provides the value to transmit circuitry for transmission throughout the 
system at step 444. The timer t3 is initialized at step 446 to start the SK time 
period T3. The CS then encrypts the BC using the current SK at step 448. The 
encrypted product is the EBC, wherein the CS provides the EBC to transmit 
circuitry for transmission in the system. If the timer t2 has expired at decision 
diamond 450, processing returns to step 442. While t2 is less than T2, if the 
timer t3 has expired at decision diamond 452, processing returns to step 446, 
else processing returns to 450. 

[1127] FIG. 7D illustrates the operation of the MS accessing a broadcast 
service. The method 460 first synchronizes the timers t2 and t3 with the values 
at the CS at step 462. The UIM of the MS receives the SK_RAND generated by 
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the CS at step 464. At step 466 the UIM generates the SK using the 
SK_RAND, BAK, and a time measurement. The DIM passes the SK to the ME 
of the MS. The DIM then decrypts the received EBC using the SK to extract the 
original BC at step 468. When the timer t2 expires at step 470 processing 
returns to step 462. While the timer t2 is less than T2, if the timer t3 expires at 
step 472, the timer t3 is initialized at step 474 and returns to 466. 
[1128] Key management and updates are illustrated in FIG. 8C, wherein the 
CS applies a function 508 to generate a value of SK_RAND, which is an interim 
value used by the CS and MS to calculate SK. Specifically, the function 508 
applies the BAK value, the SK„RAND and a time factor. While the embodiment 
illustrated in FIG. 8C applies a timer to determine when to update the SK, 
alternate embodiments may use alternate measures to provide periodic 
updates, for example occurrence of an error or other event. The CS provides 
the SK„RAND value to each of the subscribers, wherein a function 518 resident 
in each UIM applies the same function as in function 508 of the CS. The 
function 518 operates on the SK_RAND, BAK and a timer value to generate a 
SK that is stored in a memory location in the ME, such as MEMi 542 of MEi 
540. 

[1129] As discussed hereinabove, according to the fourth exemplary 
embodiment, SK is encrypted using BAK to form SKI, and SKI is sent to the MS. 
In one exemplary embodiment, SK is sent in an IPSec packet encrypted using 
BAK. The CS may also broadcast a corresponding SPI that can be used to 
identify data that is encrypted using SK. This embodiment does not need to be 
discussed in any more detail. 

[1130] In the exemplary embodiments provided hereinabove, the CS may 
choose to update SK as the CS desires. The more often the SK changes, the 
more the CS can dissuade attackers from distributing SK values. There will be 
times when an attacker considers the benefit of distributing SK values to be 
better than at other times. This will be primarily due to the nature of the content 
being broadcast. For example, on occurrence of an important event, un- 
subscribed users will be more interested in receiving news on HSBS, and 
therefore, will be willing to pay more for illegitimate access than at other times. 
At these times, the CS may increase the cost and inconvenience to the attacker 
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and un-subscribed users by changing SK more often than normal. The CS 
must keep in mind, however, the limits to the processing power of the UllVi. If 
the CS changes SK too often, then the DIM will be unable to compute the SK 
values in real time, so the users will be unable to decrypt the content in real- 
time. 

[1131] Those of skill In the art would understand that information and signals 
may be represented using any of a variety of different technologies and 
techniques. For example, data, instructions, commands, information, signals, 
bits, symbols, and chips that may be referenced throughout the above 
description may be represented by voltages, currents, electromagnetic waves, 
magnetic fields or particles, optical fields or particles, or any combination 
thereof, 

[1132] Those of skill would further appreciate that the various illustrative 
logical blocks, modules, circuits, and algorithm steps described in connection 
with the embodiments disclosed herein may be implemented as electronic 
hardware, computer software, or combinations of both. To clearly illustrate this 
interchangeability of hardware and software, various illustrative components, 
blocks, modules, circuits, and steps have been described above generally in 
terms of their functionality. Whether such functionality is implemented as 
hardware or software depends upon the particular application and design 
constraints imposed on the overall system. Skilled artisans may implement the 
described functionality in varying ways for each particular application, but such 
implementation decisions should riot be interpreted as causing a departure from 
the scope of the present invention. 

[1133] The various illustrative logical blocks, modules, and circuits described 
in connection with the embodiments disclosed herein may be implemented or 
performed with a general purpose processor, a digital signal processor (DSP), 
an application specific integrated circuit (ASIC), a field programmable gate array 
(FPGA) or other programmable logic device, discrete gate or transistor logic, 
discrete hardware components, or any combination thereof designed to perform 
the functions described herein. A general purpose processor may be a 
microprocessor, but in the alternative, the processor may be any conventional 
processor, controller, microcontroller, or state machine. A processor may also 
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be implemented as a combination of computing devices, e.g., a combination of 
a DSP and a microprocessor, a plurality of microprocessors, one or more 
microprocessors in conjunction witli a DSP core, or any other such 
configuration. 

[1134] The steps of a method or algorithm described in connection with the 
embodiments disclosed herein may be embodied directly in hardware, in a 
software module executed by a processor, or in a combination of the two. A 
software module may reside in RAM memory, flash memory, ROM memory, 
EPROM memory, EEPROM memory, registers, hard disk, a removable disk, a 
CD-ROM, or any other form of storage medium known in the art. An exemplary 
storage medium is coupled to the processor such the processor can read 
information from, and write information to, the storage medium. In the 
alternative, the storage medium may be integral to the processor. The 
processor and the storage medium may reside in an ASIC. The ASIC may 
reside in a user terminal. In the alternative, the processor and the storage 
medium may reside as discrete components in a user terminal. 
[1135] The previous description of the disclosed embodiments is provided to 
enable any person skilled in the art to make or use the present invention. 
Various modifications to these embodiments will be readily apparent to those 
skilled in the art, and the generic principles defined herein may be applied to 
other embodiments without departing from the spirit or scope of the invention. 
Thus, the present invention is not intended to be limited to the embodiments 
shown herein but is to be accorded the widest scope consistent with the 
principles and novel features disclosed herein. 
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CLAIMS 

1 . A method for secure transmissions, the method comprising: 

2 determining a short term key for a message for transmission, the short 

term key having a short term key identifier; 
4 determining an access key for the message, the access key having an 

access key identifier; 
6 encrypting the message with the access key; 

forming an Internet protocol header comprising the short term key 
8 identifier; and 

transmitting the encrypted message with the Internet protocol header. 

2. The method as in claim 1 , wherein the short term key identifier comprises 
2 the access key identifier. 

3. The method as in claim 2, wherein short term key identifier further 
2 comprises a security parameter index value. 

4. The method as in claim 3, wherein the security parameter index value is 
2 a random number. 

5. The method as in claim 1 , wherein the short term key is calculated as a 
2 function of the short term key identifier and the access key. 

6. The method as in claim 5, wherein the short term key identifier is 
2 calculated by encrypting the short term key identifier with the access key. 

7. The method as in claim 1 , wherein the Internet protocol header is part of 
2 an ESP header. 
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8. The method as in claim 7, wherein the Intemet protocol header further 
2 comprises a second random number, the second random number having a 

random number identifier. 

9. The method as in claim 8, wherein the short term key identifier comprises 
2 the access key identifier and the random number identifier. 

10. The method as in claim 9, wherein short term key identifier further 
2 comprises a security parameter index value. 

1 1 . The method as in claim 10, wherein the security parameter index value is 
2 a random number. 

12. The method as in claim 8, wherein the short term key is calculated as a 
2 function of the short term key identifier, the second random number, and the 

access key. 

13. The method as in claim 12, wherein the short term key identifier is 
2 calculated by encrypting the short term key identifier and the second random 

number with the access key. 

1 4. A method for secure reception of a transmission, the method comprising: 
2 receiving a short term key identifier specific to a transmission, the short 

term key identifier corresponding to a short term key; 
4 determining an access key based on the short term key identifier; 

encrypting the short term key identifier with the access key to recover the 
6 short term key; and 

decrypting the transmission using the short term key. 

15. The method as in claim 14, further comprising: 

2 storing the short term key identifier and short term key in a memory 

storage unit. 
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16. The method as in claim 14, wherein the short term key identifier is 
2 comprised of a random number and an access key identifier associated with the 

access key. 

17. The method as in claim 14, wherein encrypting the short term key 
2 identifier further comprises encrypting the short term key identifier and a random 

number with the access key to recover the short term key. 

18. In a wireless communication system supporting a broadcast service 
2 option, an infrastructure element comprising: 

a receive circuitry; 

4 a user identification unit, operative to recover a short-time key for 

decrypting a broadcast message, comprising: 
6 processing unit operative to decrypt key information; and 

a mobile equipment unit adapted to apply the short-time key for 
8 decrypting the broadcast message, comprising: 

memory storage unit for storing a plurality of short term keys 
1 0 and short term key identifiers. 

19. The infrastructure element as in claim 15, wherein the user identification 
2 unit further comprises a second memory storage unit for storing a plurality of 

access keys and access key identifiers. 

20. The infrastructure element as in claim 15, wherein the memory storage 
2 unit is a secure memory storage unit. 

21. An infrastructure element for a wireless communication system, 
2 comprising: 

means for receiving a short term key identifier specific to a transmission, 
4 the short term key identifier corresponding to a short term key; 

means for determining an access key based on the short term key 
6 identifier; 
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means for encrypting the short term key identifier with the access key to 
8 recover the short term key; and 

means for decrypting the transmission using the short term key. 

22. A digital signal storage device, comprising: 

2 first set of instructions for receiving a short term key identifier specific to a 

transmission, the short term key identifier corresponding to a short 
4 term key; 

second set of instructions for determining an access key based on the 
6 short term key identifier; 

third set of instructions for encrypting the short term key identifier with the 
8 access key to recover the short tenri key; and 

fourth set of instructions for decrypting the transmission using the short 
1 0 term key. 

23. A communication signal transmitted on a carrier wave, comprising: 

2 a first portion corresponding to a short term key identifier, the short term 

key identifier having a corresponding short term key; and 

4 a second portion corresponding to a transmission payload encrypted 

using the short term key. 

24. The communication signal as in claim 23, wherein the short term key 
2 identifier comprises: 

a random number portion; and 
4 an access key identifier corresponding to an access key. 
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SYSTEM FOR DIGITAL COMMUNICATION 

The invention relates to a system for digital 
communication of data divided into packets between at 
least two communication apparatuses via a network, said 
network comprising at least two media, wherein 
5 communication in the network is controlled by a network 
protocol and communication between said apparatuses is 
controlled by an apparatus protocol . 

It is known in the art to make use of a system 
wherein the data to be transferred from apparatus to 

10 apparatus and the apparatus protocol information are 
transferred in full and unabbreviated through the 
network. For this transfer through the network the packet 
is simply supplemented with the network protocol 
information required for this purpose. 

15 TCP/IP and MPAK are for instance the apparatus 

protocol and network protocol respectively. One of the 
media of the network is, for example, the ether through 
which radio links are effected, wherein such a network 
with digital radio links is for instance the MOBITEX 

20 network. 

In the case that the network contains a par|: which 
is formed by a medium through which transfer of data is 
only possible at a lesser rate, such as a digital radio 
network only having available a limited band width, the 

25 following problems herein occur. 

Unabbreviated and complete transfer through the 
network of data and apparatus protocol information 
supplemented with the network protocol information 
results in unnecessarily bulky packets, since at least 

3 0 some of the functions of the apparatus protocol are 

likewise executed by the network protocol, wherein the 
cost of the transfer through the network is directly 
proportional to the number of packets for transfer and 
the size of these packets. 
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The invention has for its object to obviate the 
above stated drawbacks and provides to this end a system 
which is distinguished in that between the network and at 
least one of the apparatuses is placed a gate device 
5 which is adapted to code or decode the apparatus protocol 
information contained in a packet together with the data 
for transfer and to add network protocol information to 
the packet or remove it therefrom. 

In many known systems the transferring apparatus 
10 will expect under the apparatus protocol a confirmation 
sent within a predetermined time by the receiving 
apparatus to acknowledge receipt of a transmitted packet, 
wherein the transferring apparatus will transmit the 
relevant packet again when such a confirmation is not 
15 received within this time. This time duration is however 
usually geared to transfer of packets between 
communication apparatuses via a network with high 
transfer rates, for instance a local area network with 
fixed cable connections such as the datanet or the 
20 internet. Since both the packet and a confirmation to 
acknowledge receipt thereof are transferred through the 
slower part of the network at a speed lower than the 
transfer rate to which the repetition time of the 
apparatus protocol is geared, such a confirmation will 
25 not reach the transferring apparatus in good time to 

prevent repeated transmission of the relevant packet. The 
cost of transferring the packets hereby rises 
unnecessarily and there is the danger of the network 
becoming overloaded. 
3 0 In accordance with the above the system is further 

distinguished in that the gate device is adapted to send 
to an apparatus a confirmation to acknowledge receipt of 
a packet transmitted by this apparatus and to transfer 
the packet to the network for further transmission to the 
35 destination apparatus. 

A system according to the present invention 
therefore has the advantage that the sise of packets for 



wo 96/1 1538 



PCT/NL95/00334 



3 

transfer is limited and unnecessarily repeated 
transmission of packets is prevented. 

The invention is further elucidated with reference 
to the figure description of an embodiment of the 
5 invention following hereinbelow. In the drawing: 

fig. 1 shows a schematic view of a system according 
to the present invention; 

fig. 2 shows a schematic view of a local area 
network; and 

10 fig. 3 shows a schematic view of a packet to be 

transferred by the system shown in fig. 1. 

The embodiment of the invention shown in fig. 1 
comprises: communication apparatuses formed by mobile 
stations 1 and another communication apparatus 12; a 

15 network 13, which network 13 comprises: transmitting and 
receiving stations 3; fixed cable connections 4; local 
nodes 5; regional nodes 6; and a central node 7; and a 
gate device 8 placed between the network 13 and the 
communication apparatus 12. 

20 The mobile stations 1 are in contact with the 

transmitting and receiving stations by means of a radio 
link 3, wherein a limited band width is available for 
this radio link, which imposes a limitation on the 
transfer rate between the mobile stations 1 and the 

25 transmitting and receiving stations 3. 

The transmitting and receiving stations 3 are each 
connected by means of fixed cable connections to a local 
node 5. It is noted here, that a local node can be 
connected to a plurality of transmitting and receiving 

3 0 stations 3. Three local nodes 5 are herein connected to a 
regional node 6 by means of fixed cable connections 4, 
wherein in the case shown two nodes 6 are connected in 
turn to a central node 7 by means of fixed cable 
connections 4. 

3 5 An example of such a network with a hierarchical 

branch structure is the MOBITEX network which is 
particularly suitable for transferring packets of digital 
data, which packets together form a message. A 
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description follows below wherein the message is 
transferred from a communication apparatus 12 via the 
network 13 to the mobile station 1. 

The communication apparatuses 12 are formed in the 
5 embodiment of the invention shown here by storage means 
for storing and retrieving data, wherein at the request 
of mobile stations 1 these means transmit requested data 
from their files to the mobile stations 1 via the network 
13 . 

10 The making of the connection, retrieval of data from 

the files of servers, transmitting of the retrieved data 
etc. is controlled by an apparatus protocol such as the 
TCP/IP protocol which in practice has become a standard 
protocol for transfer of packets of digital data between 
15 communication apparatuses. Such an apparatus protocol, 
and in particular the TCP/IP protocol, is however 
particularly suitable for such a transfer via a network 
of fixed cable connections, for instance a local area 
network such as the ethernet or the datanet, wherein due 
20 to the high transfer rates problems are caused by a 

slower medium acting as a bottleneck in the network 13. 
Transfer in network 13 is therefore controlled by a 
separate network protocol such as the MPAK protocol. 
In contrast to the known art, wherein network 
25 protocol information is simply added to the packet 

consisting of apparatus protocol information and data, a 
gate device 8 is arranged in the system according to the 
present invention, wherein a processing unit present in 
the gate device codes only the necessary apparatus 
30 protocol information and removes the rest and 

subsequently adds the network protocol information. Since 
correct transfer of packets through the network under the 
control of the network protocol is already ensured, it is 
for instance not necessary to also transfer separate 
35 information for this purpose in the apparatus protocol 
information. 

Also, immediately after receiving a packet, the gate 
device sends back a confirmation to acknowledge receipt 
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to the transmitting communication apparatus 12, which is 
permitted since correct transfer is already ensured under 
the network protocol. 

In addition, the non-coded apparatus protocol 
5 information is transferred through the network once in a 
first packet together with the key, thus enabling 
decoding by the mobile station 1 of coded apparatus 
protocol information in following packets. It is 
especially notable here that the information regarding 

10 the origin and the destination in the apparatus protocol 
information is coded by gate device 8 to a single session 
code from which the mobile station 1 can identify and 
receive a packet transmitted thereafter. 

The gate device is further provided with means for 

15 compressing the data, thereby realizing a further 

reduction in the number of packets for transfer and/or 
the size of the packets for transfer. Use can be made for 
this purpose of a compression algorithm which is 
particularly suitable for the mobile station 1 and which 

20 is supplied to gate device 8 from a communication 
apparatus 12, or of a compression algorithm already 
present in the gate device. In all functions the gate 
device 8 is transparent for the communication apparatuses 
so that the latter can operate with the same apparatus 

2 5 protocol irrespective of whether or not the gate device 8 
is present. 

In the embodiment of the invention shown in fig. 1 
another gate device forms a unit with a mobile station 1, 
wherein this gate device removes the network protocol 
30 information and decodes the apparatus protocol 
information. 

According to another embodiment in accordance with 
the present invention an additional network is situated 
on the destination side of the radio link 2 instead of 
35 the mobile stations 1 shown here. Such a network can take 
a form similar to the network shown in fig. 1 between the 
radio link 2 and the fixed cable connection 9. 
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It is further conceivable that the network 13 
contains mutual connections between local nodes 5 and/or 
mutual connections between the regional nodes 6. When 
packets forming a message are transferred via such a 
5 network the route covered by the packets is not fixed and 
the sequence of arrival can vary from the sequence in 
which the packets are transmitted as a result of 
different "transmission times". It will be apparent that 
other network configurations can also be applied. 
10 Shown in fig. 2 are: the network 12; cable 

connection 9; gate device 8; cable connections 10; and 
communication apparatuses 11a, lib and 11c. 

The communication apparatuses lla, lib and lie are 
for instance provided with databases, wherein a policeman 
15 can for instance retrieve from these nationally 

accessible databases data relating to the number plates 
of a car or the personal details of someone who has been 
detained, or wherein an employee or representative of a 
company can for instance retrieve from these databases 
20 placed on the company premises data relating to stock, 
delivery times or prices. 

A selection device 14 herein provides the connection 
between the network 13 and one of the communication 
apparatuses lla, lib or 11c via the gate device 8. 
25 Shown schematically in fig. 3 is the format of a 

packet 20 for transfer, which packet 20 comprises a part 
A containing protocol information and a part B containing 
the data for transfer. 

In the embodiment shown in fig. 1 and fig. 2 the 
30 part A of packet 20 contains a block 21 of network 

protocol information for the MPAK protocol and two blocks 
22, 23 for the apparatus protocol information of 
respectively the TCP protocol and the IP protocol. The 
whole part B of packet 20 is taken up by a block 24 with 
35 data for transfer. 

When a packet 20 is transferred between a 
communication apparatus 12 and the gate device 8 the 
packet 20 does not contain a block 21 with the network 
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protocol information. When a packet 20 is transferred 
from gate device 8 through the network 13, the block 21 
containing information for the MPAK network protocol will 
have been added, the blocks 22, 2 3 containing 
5 respectively TCP apparatus protocol information and IP 
apparatus protocol information will have been coded by 
gate device 8 and the block 24 of packet 20 containing 
data for transfer will have been compressed by the gate 
device 8. 
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CLAIMS 

1. System for digital communication of data divided 
into packets between at least two communication 
apparatuses via a network, which network comprises at 
least two Tnedia, wherein communication in the network is 

5 controlled by a network protocol and communication 
between the apparatuses is controlled by an apparatus 
protocol, characterized in that between the network and 
at least one of the apparatuses is placed a gate device 
which is adapted to code or decode the apparatus protocol 
10 information contained in a packet together with the data 
for transfer and to add network protocol information to 
the packet or remove it therefrom. 

2. System for data communication as claimed in claim 
1, characterized in that the gate device is adapted to 

15 transmit complete coding information once through the 

network to a memory means in the destination apparatus or 
in a gate device on the destination side. 

3 . System for data communication as claimed in claim 
1 or 2 , characterized in that one or more than one 

20 apparatus forms a unit with a gate device. 

4 . System for data communication as claimed in claim 
1 or 2, characterized in that the gate device is adapted 
to convert the origin information and the destination 
information in the apparatus protocol information into a 

25 single session code. 

5. System for data communication as claimed in claim 
1, characterized in that the gate device is adapted to 
send to an apparatus a confirmation of reception of a 
packet transmitted by this apparatus and to transfer the 

3 0 packet to the network for further transmission to the 
destination apparatus. 

6. System for data communication as claimed in claim 
1, characterized in that the gate device is adapted to 
code the data for transfer. 
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7, System for data cominunicat ion as claimed in claim 
1 or 5, characterized in that the gate device is adapted 
to execute the coding in accordance with a coding 
algorithm chosen or supplied by a user. 
5 8. System for data communication as claimed in claim 

1, characterized in that the communication apparatuses 
are adapted to communicate under the control of the 
TCP/IP protocol particularly suitable for a local area 
network. 

10 9. System for data communication as claimed in claim 

1 or 8 , characterized in that at least one of the 
apparatuses is formed by a network of communication 
equipment . 

10. System for data communication as claimed in 
15 claim 1, characterized in that at least a part of the 

network is formed by a digital radio network. 

11. System for data communication as claimed in 
claim 1 or 10, characterized in that the netv/ork is 
adapted to communicate under the control of the MPAK 

20 protocol particularly suitable for a digital radio 
network. 

12. System for data communication as claimed in 
claim 1, 10 or 11, characterized in that the network is 
adapted to effect error-free transfer of data by means of 

25 a check sum in only the MPAK protocol. 

13. Gate device for use in a system as claimed in 
one or more than one of the foregoing claims, which gate 
device comprises: a processing unit, a memory means, 
input and output means for connection to one or more than 

30 one communication apparatus or to one or more than one 
other network, characterized in that the gate device is 
adapted to code or decode the apparatus protocol 
information placed in a packet together with the data for 
transfer and to add network protocol information to the 

35 packet or remove it therefrom. 

14 . Packet of data and protocol information for 
digital communication in a system as claimed in one or 
more than one of the foregoing claims, characterized in 
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that during transfer between a communication apparatus 
and a gate device the packet comprises complete 
information for the apparatus protocol and the complete 
data for transfer, and that during transfer through the 
5 network the packet comprises complete information for the 
network protocol, coded information for the apparatus 
protocol and coded data, wherein the first packet for 
transfer through the network further contains the coding 
information. 
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munication apparatuses via a network, said networic com- 
prising at least two media, wbcreui communication in the 
networic is controlled by a network protocol and communi- 
cation between the apparatuses is controlled by an apparatus 
protocol. Unabbreviated and complete transfer through the 
network of data and apparatus protocol information supple- 
mented with network protocol information results in unnec- 
essarily bulky packets, since at least some of the functiotu 
of the ^aratus protocol are likewise executed by the net- 
work protocol, wherein the cost of the transfer through the 
network is directly propcntional to the number of packets 
for trmsfer and the size of these packets. The invention 
has for its object to obviate the above stated drawbacks and 
provides to this end a system which is distinguished in diat 
between the network and at least one of the apparatuses is 
placed a gate device (S) vMch is adapted to code or 
decode the apparatus protocol infbrmation contained 
in a packet toother with the data for transfer and to 
add network protocol information to the packet or 
lemore it therefrom, and the system is further 
distinguished in that the gate device is adapted to 
tnsaniit to an apparatus a confirmation lo 
acknowledge receipt of a packet transmitted by this 
apparatus and to transfer the packet to the network 
for further transmission to the destination apparatus. 
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in a mobile communications network when the call is received from a 
calling party via a fixed network without any signalling support which 
provides information on the protocol employed by the calling party. In 
the invention, a service is assigned only one diteclory number, which 
is common to all the protocols employed by the service. The protocol 
IdentifieT in a service definition linked with this directory number has 
a neutral (undefined) value or may be inteipieled as neutral. The IWF, 
upon receiving the neutral RA parameter (Step 2), is switched onto the 
line and monitors a traffic channel received from the fixed network in 
order to identify the protocol employed by the calling terminal equiiraent 
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Adapting the fixed network protocols to a mobile 
communications network 

Field of the Invention 

5 The invention relates to a method and an 

arrangement for establishing a mobile-terminating call 
in a mobile communications network when the call is 
received from a calling party via a fixed network 
without any signalling support for carrying information 
10 on the protocol employed by the calling party. 

Background of the Invention 

Present-day mobile communications systems 
provide the subscribers, in addition to standard speech 
transmission, with a variety of data transfer features. 

15 The data services usually employ a certain specified 

communication protocol within the mobile network. In 
the pan-European digital mobile communication system 
GSM (Global System for Mobile Communications), for 
instance, a CCITT V.llO -based, UDI coded rate 

20 adaptation protocol is employed, and, in addition, a 

radio link protocol (RLP) is employed in non- 
transparent services. A digital connection from a 
mobile network to a fixed network, such as an ISDN 
(Integrated Services Digital Network) or a public 

25 switched telephone network PSTN, may employ different 

kinds of protocols. Examples of such protocols are the 
rate adaptation protocols CCITT V.llO and V.120 of the 
ISDN network. 

An important feature related to data transfer 

30 services are adaptation functions for adapting the 

internal data connection within the mobile network to 
the protocols employed by the terminal equipments and 
other telecommunications networks. Typically, the 
adaptation functions are a Terminal Adaptation Function 

35 TAF at the interface between a mobile station and a 
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data terminal connected thereto, and an Interworking 
Function IWF at the interface between the mobile 
network and another telecommunications network. 

Mobile networks are expected to provide a wide 
5 range of data services of various kinds which support 

the commonest data transfer protocols of fixed 
telecommunications networks. Consequently, a separate 
IWF is also required for each data transfer protocol. 
The mobile network must know which data transfer 
10 protocol the terminal equipments wish to employ in each 

call in order that it would be able to select the 
correct IWF. 

In a mobile-originating call (MOC) the mobile 
station signals the information on the protocol it 
15 wishes to be employed towards the fixed network and the 

called party. In GSM mobile communications system, for 
instance, the information on the desired protocol is in 
a Bearer Capability Information Element (BCIE) in a 
setup message. On the basis of this information, the 
20 IWF is configured to provide a suitable interworking 

function between the mobile network and the 
telecommunications network. In case signalling that 
supports transmitting the protocol information is 
employed on the entire connection between the mobile 
25 network and the called party, the information is also 

transmitted to the called party. The required 
signalling support is provided e.g. in ISDN networks 
(Integrated Services Digital Network) . If such 
signalling support is not provided, it is the 
30 responsibility of the calling subscriber to select the 

correct protocol, that is, the calling subscriber must 
know the protocol of the called subscriber and select 
the protocol of the IWF accordingly. Signalling support 
is not available e.g. in the conventional public 
35 switched telephone network PSTN. 
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A mobile-terminating call {MTC) is more 
problematic. In case the required signalling support is 
available on the entire connection between the calling 
party and the mobile network, the protocol parameters 
5 of the calling subscriber are transmitted to the mobile 

network, which may configure the IWF according to them. 
In practice, however, signalling support is not always 
available over the entire connection. This is the case, 
for instance, when a call originates from the PSTN or 

10 has been routed via the PSTN. When the signalling 

support is not available, the mobile network should be 
able to obtain the information on the protocol required 
by the call in some other way. 

A prior art approach to the problem is a 

15 Multi Numbering Scheme, in which a mobile subscriber 

has as many directory numbers {MSISDN) as he has 
different services to which he wishes to receive 
incoming calls. In accordance with the multinumbering 
scheme, the calling subscriber dials the directory 

20 number of the mobile subscriber according to the 

desired service. In the GSM system, the services of the 
subscribers are determined in a subscriber's home 
location register (HLR) , in which other subscriber 
information is also stored permanently. The HLR is also 

25 used for storing information on the mapping between the 

directory numbers and the services of the subscribers. 
In the HLR, a specific BCIE element indicating the type 
of a call and the network resources and the protocol 
required for the call is also linked with the Mobile 

30 Subscriber ISDN Number (MSISDN) . The IWF may be 

configured according to this information. According to 
the present recommendations, a subscriber has a 
separate MSISDN number for the V.llO protocol and a 
separate MSISDN number for the V.120 protocol. 

35 For the network operator and the mobile 
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subscribers, such a vast number of services causes 
confusion and trouble. In order for the mobile 
subscriber to be able to carry out and receive calls 
requiring different protocols, he must subscribe to 
5 several different bearer services from the network 

operator. From the point of view of the network 
operator, it is in turn problematic that each user 
should require a plurality of directory numbers, which 
wastes the number space of the network. Furthermore, 
10 determining the services in the network databases 

consumes database capacity. The multinumbering scheme 
is thus a working, yet a poor solution. 
Summary of the Invention 

It is an object of the invention to provide a 
15 method and arrangement that allow protocol adaptation 

between the mobile communications system and the fixed 
network more efficiently as compared with the present 
multinumbering scheme in a case where no signalling 
support is provided, thus saving the number space and 
20 database capacity. 

This is achieved with a method for 
establishing a mobile-terminating data call when the 
call is received from the calling party via a fixed 
network without signalling support carrying the 
25 information on the protocol employed by the calling 

party. The method is characterized by 

receiving a call to a directory number of a 
subscriber, said directory number being assigned to a 
data service employing two or more alternative 
30 protocols towards the fixed network, 

retrieving from the subscriber data a service 
definition linked with said directory number, the 
protocol parameter of said definition having a neutral 
value or a value that is interpreted as neutral, 
35 assigning an interworking function resource in 



wo 97/17790 



PCT/FI96/00598 



accordance with said service definition, omitting the 
definition of the protocol due to said neutral value or 
the value that is interpreted as neutral, 

monitoring by means of the assigned 
5 interworking function resource the traffic channel 

received from the fixed network, 

identifying the protocol employed by the 
calling party on the basis of signalling characteristic 
thereof, 

10 configuring said assigned interworking 

function resource to employ said identified protocol 
towards said calling party. 

The invention also relates to providing an 
arrangement for establishing a mobile-terminating data 

15 call in a mobile communications network when the call 

is received from the calling party via a fixed network 
without signalling support carrying the information on 
the protocol employed by the calling party. The 
arrangement is characterized by 

20 the subscriber database of the mobile 

communications network having one directory number 
defined for a subscriber's data service that employs 
two or more alternative protocols towards the fixed 
network, the protocol parameter of a service definition 

25 linked with said directory number having a neutral 

value or a value that is interpreted as neutral, 

the mobile network being arranged, in a 
mobile-terminating call made to said directory number, 
to assign an interworking function apparatus according 

30 to the service definition, but to omit the 

configuration of the protocol employed towards the 
fixed network due to the neutral value of said protocol 
parameter or the value that is interpreted as neutral, 
said assigned interworking function apparatus 

35 (IWF) being arranged to monitor a traffic channel 
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received from the fixed network, to identify the 
protocol employed by the calling party (TE) on the 
basis of signalling characteristic thereof, and to 
configure itself to employ said identified protocol 
5 towards said calling party. 

It is yet another aspect of the invention to 
provide an interworking function apparatus for 
achieving a protocol adaptation between a mobile 
communications network and a fixed network when a call 
10 is received from the calling party via the fixed 

network without any signalling support carrying the 
information on the protocol employed by the calling 
party. The apparatus is characterized by 

the interworking function apparatus being 
15 arranged, in a mobile-terminating call, to assign 

interworking function resources according to the 
service definition obtained from the subscriber 
database, but to omit the configuration of the protocol 
employed towards the fixed network if the protocol 
20 parameter of said service definition has a neutral 

value or a value that is interpreted as neutral, 

the interworking function apparatus being 
arranged to monitor a traffic channel received from the 
fixed network, to identify the protocol employed by the 
25 calling party on the basis of signalling characteristic 

thereof, and to configure said assigned interworking 
function resources to employ said identified protocol 
towards said calling party. 

In the invention, a service is assigned only 
30 one directory number which is common to all the 

protocols employed by the service. In the service 
definition linked with this directory number, the 
protocol identifiers are neutral (undefined) in value 
or interpreted as neutral. When the interworking 
35 function (IWF) of the mobile network receives, in case 
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of a mobile terminating data call, a protocol 
identifier which is neutral or interpreted as neutral, 
it does not attempt, after being switched to the line, 
to synchronize itself towards the fixed network 
5 according to any protocol, but it monitors the traffic 

channel received from the fixed network in order to 
identify the protocol employed by the calling terminal 
equipment. The IWF, however, synchronizes the internal 
data connection within the mobile network in the 

10 specified way in the direction of the mobile station. 

After identifying the protocol of the calling terminal 
equipment, the IWF starts to operate in the manner 
required by the identified protocol. After setting up 
a data link, the IWF signals the status of the traffic 

15 channel to the mobile station in the usual way, and 

data transmission may begin. 

Identifying the protocol is based on detecting 
synchronization or signalling characteristic thereof. 
The CCITT V.llO protocol may be identified by means of 

20 a V.llO synchronization frame. After identifying the 

V.llO synchronization frame, the IWF itself starts 
transmitting V.llO synchronization frames to the fixed 
network. The CCITT V.120 protocol may also be 
identified by means of a V.120 frame flag, in addition 

25 to which the identification may be confirmed by means 

of a link setup message. After identifying a V.120 
frame flag, the IWF itself starts transmitting frame 
flags to the fixed network, and after identifying the 
link setup message, it acknowledges the message etc. 

3 0 Brief Description of the Drawings 

In the following, the invention will be 
explained by means of preferred embodiments with 
reference to the attached drawings, in which 

Figure 1 illustrates a mobile communications 

35 system in which the present invention may be applied. 
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Figure 2 is a schematic block diagram of a 
mobile services switching centre provided with an 
interworking function apparatus IWF, 

Figure 3A is a signalling diagram illustrating 
5 the first part of call establishment in a mobile- 

terminating UDI call which is made to an MSISDN number 
of an asynchronic service of a mobile station from a 
terminal equipment of a fixed network. 

Figure 3B is a signalling diagram illustrating 
10 the latter part of call establishment shown in Figure 

3A, the protocol of the terminal equipment being V.120, 

Figure 3C is a signalling diagram illustrating 
the latter part of call establishment shown in Figure 
3A, the protocol of the terminal equipment being V.llO, 
15 and 

Figure 4 is a flow chart illustrating 
monitoring of the traffic channel and identifying the 
protocol carried out by the IWF. 

The present invention may be used in all 
20 digital mobile communication systems in which data 

services employ two or more kinds of different 
protocols towards the fixed network, such as ISDN or 
PSTN. 

The present invention is particularly well 
25 suited for data transmission applications in the Pan- 

European digital mobile communication system GSM 
(Global System for Mobile Communications) and other 
GSM-based systems, such as DCS1800 (Digital 
Communication System) , and the digital cellular system 
30 PCS (Personal Communication System) in the USA. The 

invention will be disclosed below by way of example of 
the GSM mobile communications system. The structure and 
operation of the GSM system are well known to a person 
skilled in the art, and they are specified in the ETSI 
35 (European Telecommunications Standards Institute) GSM 
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specifications. Reference is also made to "GSM System 
for Mobile Communication" by M. Mouly and M. Pautet, 
Palaiseau, France, 1992; ISBN 2-9507190-0-7. 

The basic structure of the GSM system is 
5 illustrated in Figure 1. The GSM structure consists of 

two parts: a base station system BSS and a network sub- 
system (NSS) . The BSS and the mobile stations MS 
communicate over radio connections. In the BSS, each 
cell is served by a base station BTS. A group of base 

10 stations is connected to a base station controller BSC, 

whose purpose is to control the radio frequencies and 
channels used by the BTS. The BSCs are connected to a 
mobile services switching center MSG. Specific MSCs are 
connected to other telecommunication networks, such as 

15 the PSTN, and comprise gateway functions for calls to 

and from these networks. These MSCs are known as 
gateway MSCs (GMSC} . 

There are two main classes of databases, 
associated with call routing. A home location register 

20 HLR permanently or semi-permanently stores the 

subscriber data of all the subscribers of the network, 
including information on the services the subscriber 
may have access to, and on the subscriber's current 
location. The second register type is a visitor 

25 location register VLR. The VLR is usually associated 

with one MSC, but it may, however, serve several MSCs. 
It is common practice that the VLR is integrated into 
the MSC. The integrated network element is known as a 
visitor MSC (VMSC) - Whenever the mobile station MS is 

30 active (registered and capable of making or receiving 

calls), the majority of the mobile subscriber 
information concerning the MS and stored in the HLR is 
copied to the VLR of the particular MSC in whose 
service area the MS is located. 

35 Still referring to Figure 1, a data link is 
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established in the GSM system between a mobile station 
MS network terminal TAF (Terminal Adaptation Function) 
31 and a network adaptor IWF ( Interworking Function) 41 
in the mobile communication network. In the GSM 
5 network, the data link in data transfer is a V.llO rate 

adapted, V,24 interface compatible, UDI coded digital 
Full Duplex connection. In this connection, the V.llO 
connection is a digital transmission channel originally 
developed for ISDN (Integrated Services Digital 

10 Network). The transmission channel adapts to the V.24 

interface and also provides a possibility for transfer 
of V.24 statuses (control signals). The CCITT 
recoimnendation for a V. 110 rate-adapted connection is 
specified in the recommendation CCITT Blue Book: V.llO. 

15 The CCITT recommendation for a V.2 4 interface is 

disclosed in the CCITT Blue Book: V.24. In non- 
transparent data services, a radio link protocol RLP is 
also employed. The terminal adaptor TAF adapts a data 
terminal equipment DTE connected to the MS for the 

20 V.llO connection, which is established over a physical 

connection using one or more traffic channels. The IWF 
couples the GSM V.llO connection to another V.llO or 
V.120 network such as an ISDN or another GSM network, 
or to another transit network, such as the public 

25 switched telephone network PSTN. The CCITT 

recommendation for a V.120 rate-adapted connection is 
specified in the recommendation CCITT White Book: 
V.120. 

As it was explained above, modern mobile 
30 communication systems support different kinds of 

teleservices and bearer services. The bearer services 
of the GSM system are specified in the specification 
GSM 02.02 Version 4.2.0, and the teleservices in the 
specification GSM 0.0.3 Version 4.3.0. 
35 The network adaptor IWF is often placed at the 
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MSG. Figure 2 illustrates a network adaptor apparatus 
placed at the MSG, carrying out the adapting to the 
PSTN and the data services of the ISDN network.. For 
adapting to the PSTN, an ISDN 3.1 kHz audio service or 
5 another GSM network, the IWF comprises a group of 

baseband data modems 41A, which also include a rate 
adaptor. The modems 41A are autobauding modems capable 
of handshaking any data rate supported by the GSM 
system between 300-9600 bit/s, or for HSCSD data 

10 services even higher transfer rates, such as 14.4-28.8 

kbit/s. Data modem 41A is used e.g. when a data 
connection is required via an analog PSTN to a data 
terminal TE of a fixed network or to an ISDN network 
with a 3.1 kHz audio service. In such a case, there is 

15 a similar data modem at the other end of the analog 

modem connection. There may be any required number of 
data modems, although Figure 2 only shows one modem 41A 
for the sake of clarity. The analog side of the modem 
41A is connected via an exchange termination ET and the 

20 digital side is connected directly to a group switch 

GSW21 of the MSG. In addition, digital transfer links 
transmitted via the exchange terminations to the base 
station systems BSS are coupled to the group switch 21. 
Furthermore, via the exchange terminations ET, the 

25 transmissions channels of other telecommunication 

networks, such as ISDN or PSTN, are coupled to the 
group switch 21. The interworking function apparatus 
IWF of Figure 2 further comprises, for adapting to the 
Unrestricted Digital Information service UDI of the 

30 ISDN network, a data interface unit DIU 41B which 

comprises a rate adaptor. The DIO is used in GSM data 
calls to adapt the user data, rate adapted according to 
the V.llO or V.120 protocol, from the ISDN, as well as 
the status and control information according to the 

35 V.llO or V.120 protocol to the GSM traffic channel, and 
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in the opposite direction, the user data from the GSM 
traffic channel as well as the status and control 
information to the V.llO and V.120 frame structure of 
the ISDN. The ISDN side of the DIU 4 IB is connected via 
5 the exchange terminal ET, and the GSM side directly to 

the group switch GSW21. Although only one DIU 41B is 
shown in Figure 2, there may be any number of them 
depending on the capacity requirements. The group 
switch GSW21 and the interworking function apparatus 

10 IWF, as well as data call establishing, maintaining and 

releasing are all controlled by a call control 42. The 
operation of the IWF is controlled by an IWF control 
unit 41C which, under control of the call control 42, 
connects a network adaptor, i.e. the modem 41A or DIU 

15 41B, required by the bearer service used by a 

particular data call to the data connection. In Figure 
2, a solid line illustrates connecting the modem 41A, 
and a broken line illustrates connecting the DIU 4 IB. 
As an example of a mobile services switching center 

20 comprising such a network adaptor apparatus, the Nokia 

Telecommunication Ltd DX200 MSG can be mentioned. 

As stated above, a mobile subscriber may 
traditionally have been entitled to different 
teleservices and bearer services each having a separate 

25 directory number MSISDN. In other words, each 

subscriber has had several MSISDN numbers. In addition, 
it has been necessary to determine every teleservice 
and bearer service of every subscriber in the 
subscriber's HLR in connection with other subscriber 

30 data, and to transfer them to the VLR. In the 

subscriber data, every MSISDN number is associated with 
a GSM system BCIE value, either directly or by means of 
an index pointing to a BCIE values chart. The BCIE is 
an information element used by the GSM system to 

35 transfer information on all the network requirements 
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related to the call, such as transfer rates, number of 
data and end bits, etc. The BCIE is described in, for 
example, the GSM specification 04.08, version 4.5.0, 
pp. 423-431. 

5 In the invention, a service is assigned only 

one directory number MSISDN, which is conunon to all the 
protocols employed by the service. The service 
definition linked with this MSISDN number is stored in 
the HLR along with the other subscriber data. In this 

10 service definition, a GSM BCIE is linked with the 

MSISDN number. In the GSM BCIE the parameter RA (Rate 
Adaptation) that determines the rate adaptation 
protocol in the GSM BCIE has a neutral {undefined) 
value, or a value that may be interpreted as neutral. 

15 Presently, the parameter RA may determine the following 

cases: no rate adaptation, V.110/X.30 rate adaptation, 
X.31 flag stuffing, V.120. Furthermore, there are free 
values one of which may be selected as the neutral 
value in accordance with the invention. A neutral value 

20 of the parameter RA herein generally refers to a value 

which does not define any protocol for the IWF, but, as 
a result of which the MSC/IWF attempts to identify the 
protocol of a terminal equipment of a fixed network 
from the traffic channel. The MSC/IWF may also be 

25 arranged to interpret specific values of the RA 

parameter, such as V. 110 and V.120, as neutral. 

When the IWF obtains in connection of a 
terminating data call a neutral value of the RA 
parameter or a value that may be interpreted as 

30 neutral, it does not attempt to operate according to 

any protocol after switching to the line, until it has 
identified, by monitoring the traffic channel from the 
fixed network, the protocol employed by the calling 
terminal equipment. 

35 In the following, establishing a MT call 
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according to the invention will be explained with 
reference to Figures 3A-C and 4. In the example, the 
service is an asynchronous UDI service, the different 
protocols employed by the service being V.llO and 
5 V.120. It must be noted, however, that the invention is 

not limited to these protocols, but it generally 
applies to any protocol. 

The signalling diagrams of Figures 3A-C are 
related to an exemplary case in which a mobile- 

10 terminating (MT) UDI call is made from a fixed, terminal 

equipment TE to the MSI SDN number of a mobile 
subscriber, said number being assigned to an 
asynchronous data service of the subscriber. In such a 
case, the call is received in the mobile network from 

15 an ISDN network, but signalling support is not 

available on the entire connection between the mobile 
network and the terminal equipment TE for transmitting 
the protocol information. The first part of call 
establishment is illustrated in Figure 3A, and it is 

20 similar for both protocols. Figures 3B and 3C 

illustrate the latter part of call establishment in a 
case where the terminal equipment TE is employing V.120 
protocol and V.llO protocol, respectively. 

In Figure 3A, an lAM message (Initial Address 

25 Message) is transmitted from an ISDN network to a 

gateway MSG (GMSC) of the mobile network in a call made 
to a directory number MSISDN of a mobile subscriber's 
asynchronous service. The GMSC carries out a routing 
information request Send Routing Info to the 

30 subscriber's HLR, which is determined on the basis of 

the called MSISDN. Along with the routing information 
request, the subscriber's MSISDN number is also 
transmitted. The HLR retrieves from the subscriber data 
the GSM BCIE linked with the called directory number 
35 MSISDN. In this GSM BCIE the parameter ITC (Information 
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Transfer Capability) has the value UDI and the 
parameter RA has a neutral value, or a value that may 
be interpreted as neutral, e.g. V.llO. The HLR then 
transmits the VLR a roaming number request Provide ^5SRN 
5 containing said GSM BCIE. The VLR stores the GSMBCIE 

and allocates the call a roaming number MSRN. The MSRN 
is transmitted to the HLR, which forwards it to the 
GMSC. The GMSC routes the call on the basis of the 
roaming number MSRN to the MSG in the area of which the 

10 mobile subscriber MS is located. The MSG then requests 

information from the VLR for establishing a mobile- 
terminating call on the basis of the roaming number 
MSRN. On the basis of the MSRN, the VLR retrieves the 
BCIE which was previously received from the HLR, and 

15 transmits it to the MSG. Following this, the MSG 

transmits the MS a call set-up message 'setup', which 
also contains the GSM BCIE. The MS replies with a 'call 
confirm' message. Subsequently, the MSG request the ESS 
with an 'Assignment Request' message to assign the 

20 required radio channels, and the BSS acknowledges wxth 

an 'Assignment Complete' message. Thereafter, the MSG 
allocates the required IWF resources by transmitting 
the IWF an 'IWF Setup' message, which also contains the 
GSM BCIE obtained from the VLR. At this stage, the 

2 5 operation of the IWF according to the invention begins, 

illustrated by means of the block diagram in Figure 4. 

In step 51 in Figure 4, an IWF control unit 
41C (Figure 2) receives from call control 42 of the MSG 
a SETUP message that contains the BCIE. IWF control 

30 unit 41G analyses the BCIE and, upon detecting that the 

ITC is an UDI, assigns the call a DIU 41B. In addition, 
the IWF checks the value of the RA parameter (step 52) , 
Provided that the value of the RA parameter is neutral 
or can be interpreted as neutral, e.g. V.llO or V.120, 

35 the IWF control unit does not configure the DIU 41B for 
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any protocol, but prepares for monitoring a traffic 
channel received from the fixed network (step 54). 
Provided that, in step 52, it is detected that the 
value of the parameter RA is other than neutral or it 
5 cannot be interpreted as neutral, the IWF control unit 

41C configures the DIU 4 IB in accordance with the 
protocol (53) determined by the parameter RA. Again 
with reference to Figure 3, the IWF acknowledges the 
allocation of the resources with a message 
10 'acknowledgement'. The MS report with a message 

'alerting' that alerting the calling subscriber has 
been started. The MSG, in turn, transmits the calling 
terminal equipment TE of the fixed network a message 
'address complete' indicating that the connection has 
15 been established. The MSG then transmits a message 

'connect' indicating that the called subscriber accepts 
the call, as a result of which the MSG transmits a 
message 'answer signal' to the calling terminal 
equipment TE. The MSG then controls the IWF with a 
20 message 'device on line'. It is thus returned to the 

operation of the IWF in accordance with the invention, 
described in Figure 4 . 

Again with reference to Figure 4, the IWF 
control unit 41C (Figure 2) receives from the call 
25 control 42 of the MSG a message 'device on line', as a 

result of which it connects the DIU 41B between the 
traffic channel received from the GSW21 BSS and the 
traffic channel received from the PSTN, as shown in 
Figure 2 with a broken line. Following this, the 
30 operation of the IWF continues in accordance with the 

flow chart in Figure 4. 

With reference to Figure 4, after the IWF has 
been connected onto the line, synchronization of the 
GSM traffic channel is carried out between the TAF and 
35 the IWF in the usual way, and the IWF control unit 41C 
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starts to monitor the traffic channel received from the 
fixed network by means of the DIU 41B. The DIU 41B may 
thereby transmit a string of 1-bits to the traffic 
channel in the direction of the fixed network because 
5 this procedure is the same regardless of whether the 

calling terminal equipment TE employs a V.llO or V.120 
protocol (step 56) . Subsequently, the IWF control unit 
41C checks whether the signalling received from the 
terminal equipment TE contains a frame flag typical of 

10 V.120 protocol, that is, a HDLC flag 01111110 (step 

57) . If it does, this is followed by signalling 
according to Figure 3B. 

The IWF transmits HDLC flags to the terminal 
equipment TE of the fixed network (step 58, Figure 4). 

15 As transmitting HDLC flags may be a part of some other 

protocol than V.120, the IWF control unit 41C checks in 
the preferred embodiment of the invention whether a 
data link setup message characteristic of the V.120 
protocol is received from the terminal equipment TE 

20 (step 59) . If the data link setup message is received, 

the IWF control unit 41C configures the DIU 41B to 
employ the V.120 protocol, and the IWF begins to 
operate in the direction of the fixed network in the 
manner required by the V.120 protocol (step 60). This 

25 includes transmitting an acknowledgement to the data 

link setup message to the terminal equipment TE. 
Thereafter, the IWF signals a normal traffic channel 
status to the NS, and data transfer may begin (step 
64) . 

30 If the data link setup message is not received 

in step 59, protocol identification is regarded as 
failed in this embodiment of the invention, and it is 
proceeded to the end. 

Provided that the HDLC flag is not received in 

35 step 57 of Figure 4, the IWF control unit 41C checks 
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whether the signalling received from the fixed network 
contains a V.llO synchronization frame (step 61). If 
a V.llO synchronization frame is received, signalling 
proceeds in the manner described in Figure 3C. In other 
5 words, after identifying V.llO protocol by means of the 

V.llO synchronization frame, the IWF control unit 41C 
configures the DIU 41B in accordance with the 
identified V.llO protocol. Thereafter, the IWF 
transmits V.llO synchronization frames to the terminal 

10 equipment TE to the fixed network (step 62, Figure 4). 

The IWF then continues the operation in accordance with 
V.llO protocol in the direction of the terminal 
equipment TE (step 63) and signals the status of the 
traffic channel to the MS in the usual way by using 

15 V.24 statuses (step 64). 

In case a V.llO frame is not received in step 
€1, protocol identification is interpreted as failed in 
this embodiment and it is proceeded to the end. 

The figures and the explanation associated 

20 therewith are only intended to illustrate the resent 

invention. In its details, the invention may vary 
within the scope and the spirit of the attached claims. 



25 



30 



35 
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Claims : 

1. A method and arrangement for establishing 
a mobile-terminating call in a mobile communications 
5 network when the call is received from a calling party 

via a fixed network without any signalling support 
carrying information on the protocol employed by the 
calling party, characterized by 

receiving a call to a directory number of a 
10 subscriber, said directory number being assigned to a 

data service employing two or more alternative 
protocols towards the fixed network, 

retrieving from the subscriber data a service 
definition linked with said directory number, the 
15 protocol parameter of said definition having a neutral 

value or a value that is interpreted as neutral, 

assigning an interworking function resource in 
accordance with said service definition, omitting the 
definition of the protocol due to said neutral value or 
20 the value that is interpreted as neutral, 

monitoring by means of the assigned 
interworking function resource the traffic channel 
received from the fixed network, 

identifying the protocol employed by the 
25 calling party on the basis of signalling characteristic 

thereof, 

configuring said assigned interworking 
function resource to employ said identified protocol 
towards said calling party. 
30 2. A method as claimed in claim 1, 

characterized by 

identifying the protocol of the calling party 
as a CCITT V.llO rate adaptation protocol provided that 
a V.llO synchronization frame is received from the 
35 traffic channel, 
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configuring said assigned interworking 
function resource to employ V.llO protocol. 

3. A method as claimed in claim 1, 
characterized by 

5 identifying the protocol of the calling party 

as a CCITT V.120 rate adaptation protocol provided that 
a V.120 frame flag is received from the traffic 
channel, 

configuring said assigned interworking 
10 function resource to employ V.120 protocol. 

4. A method as claimed in claim 1, 
characterized by 

receiving from the traffic channel a V.120 
frame flag, 

15 transmitting V.120 frame flags to another 

traffic channel, 

identifying the protocol of the calling party 
as a CCITT V.120 rate adaptation protocol provided that 
a data link setup message according to V.120 protocol 
20 is received from the traffic channel, 

configuring said interworking function 
resource to employ the V.120 protocol, 

5. An arrangement for establishing a mobile- 
terminating data call in a mobile communications 

25 network when a call is received from a calling party 

(TE) via a fixed network (PSTN, ISDN) without 
signalling support that carries the information on the 
protocol employed by the calling party, 
characterized by 

30 the subscriber database (HLR) of the mobile 

communications network having one directory number 
defined for a subscriber's data service that employs 
two or more alternative protocols towards the fixed 
network, the protocol parameter of a service definition 

35 linked with said directory number having a neutral 
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value or a value that is interpreted as neutral, 

the mobile network being arranged, in a 
mobile-terminating (MS) call to said directory number, 
to assign an interworking function apparatus {IWF} 
5 according to the service definition, but to omit the 

configuration of the protocol employed in the direction 
of the fixed network (PSTN, ISDN) due to the neutral 
value of said protocol parameter or the value that is 
interpreted as neutral, 

10 said assigned interworking function apparatus 

(IWF) being arranged to monitor a traffic channel 
received from the fixed network, to identify the 
protocol employed by the calling party (TE) on the 
basis of signalling characteristic thereof, and to 

15 configure itself to employ said identified protocol 

towards said calling party. 

6. An arrangement as claimed in claim 5, 
characterized by the protocol employed by 
the calling party (TE) being a CCITT V. 110 rate 

20 adaptation protocol, and said signalling characteristic 

of the protocol containing a V.llO signalling frame. 

7. An arrangement as claimed in claim 5, 
characterized by the protocol employed by 
the calling party (TE) being a CCITT V.120 rate 

25 adaptation protocol, and said signalling characteristic 

of the protocol containing a V.120 frame flag or a 
V.120 data link setup message. 

8. An interworking function apparatus of a 
mobile communication network for achieving a protocol 

30 adaptation when a call is received from the calling 

party via a fixed network without signalling support 
that carries the information on the protocol employed 
by the calling party, characterized by 

the interworking function apparatus (IWF) 

35 being arranged, in a mobile-terminating (MS) call, to 
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assign interworking function resources according to the 
service definition obtained from the subscriber 
database, but to omit the configuration of the protocol 
employed towards the fixed network (PSTN, ISDN) if the 
5 protocol parameter of said service definition has a 

neutral value or a value that is interpreted as 
neutral, 

the assigned interworking function apparatus 
(IWF) being arranged to monitor a traffic channel 

10 received from the fixed network, to identify the 

protocol employed by the calling party (TE) on the 
basis of signalling characteristic thereof, and to 
configure said assigned interworking function resources 
to employ said identified protocol towards said calling 

15 party (TE) . 
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WAVEFORM AND FRAME STRUCTURE FOR A FIXED WIRELESS LOOP 
SYNCHRONOUS CDMA COMMUNICATIONS SYSTEM 

FIELD OF THE INVENTION! 

This invention relates generally to wireless local loop 
systems and, in particular, a fixed wireless loop system 
providing voice and data communications between a radio 
base unit and a plurality of subscriber stations. 

BACKGROUND OF THE INVENTION; 

Local loop by traditional definition is that portion of a 
network, that connects a subscriber ' s home to a central 
office switch. This is, however, an expansive definition 
that does not hold true as the network extends into the 
local loop by means of Digital Loop Carrier and Digital 
Cross connects. For the purposes of this invention, local 
loop is considered as the connection from the subscriber's 
premises to the connecting point in the network, whatever 
the nature of that connection may be. 

Until recently the local loop was mostly based on copper 
plant supplemented by microwave radio links for remote 
areas or difficult terrain. Over the last decade fiber 
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optics have made significant inroads into the local loop 
(also referred to as "access" network) reaching closer to 
subscriber homes and buildings. Sonet based access networks 
bring fiber to the curb. These fiber based solutions can 
provide very high bandwidth services, reliably and cost- 
effectively, in urban/metropolitan areas with significant 
numbers of business customers. in fact, most access 
providers in the U.S. have used such fiber based plant to 
provide access services to U.S. business customers. 

The copper and fiber based solutions, while economical in 
many situations, still suffer from a number of drawbacks. 

For example, in an area without an existing network 
infrastructure, it is very time consuming and expensive to 
build a new network. The expense is primarily in the labor, 
rights acquisition (for right of way or easement), and in 
electronics (for fiber based access) . Overall the process 
is very slow due to extensive effort involved in acquiring 
right of way and in performing the required construction, 
aerial and/or underground. Also, in locations with 
extensive but congested existing infrastructure, it is 
often very expensive to add capacity due to already full 
ducts and cables, and sometimes impossible to add capacity 
without resorting to upgrading the entire system. In 
addition, wireline solutions tend to have costs that are 
distance sensitive, hence they are inherently unsuitable 
for sparse/scattered demand. Wireline networks are also not 
amenable to redeployment, which results in stranded assets 
when demand (consumer) moves. Wireline networks also cannot 
be rapidly deployed in emergency situations. 

The term "fixed wireless loop", or FWL, connotes a fixed 
wireless based local access. However, it is often mixed 
with limited mobility solutions under the broader term 
"Radio Access". Irrespective of the type of radio 
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technology, all fixed wireless or radio access systems use 
wireless means to provide network access to the subscriber. 
Broadly speaking, there are three main categories of fixed 
wireless solutions. 

Fixed cellular systems are primarily based on existing 
analog cellular systems such as AMPS (in North America) or 
NMT (in Nordic countries) . 

Fixed cordless systems are primarily based on the European 
DECT standard using digital TDMA Time Division Duplex 
technology . 

Bespoke systems are designed specifically for fixed 
wireless application. Conventional systems in this category 
are the analog microwave point to multi-point systems. More 
recently deployed systems operate at higher frequencies and 
employ digital technologies. These systems may be derived 
from similar cellular technologies, but are not based on 
any existing agreed upon standards. 

Of the three main categories of fixed wireless systems 
there is no one solution that is clearly superior to 
others. If the primary need for a system operator is to 
provide voice oriented service wherein voice quality is not 
a limiting factor, then often a fixed cellular system is 
adequate, and even desirable because of its relatively low 
equipment cost. For very high density urban situations, a 
DECT solution may be desirable due to its high load 
carrying capacity and its pico-cellular architecture. 
Microwave solutions are best for sparse populations. 
Bespoke systems function well over a wide range of 
situations and have the best overall quality and desirable 
features, however they are likely to be more expensive, at 
least in the near future. 
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Most residential consumers in developing economies are 
mainly interested in adequate voice service. However, most 
business customers require data and fax service in addition 
to voice. With the growing popularity of home computers and 
5 Internet access, a need is arising to provide residential 
consumers with high speed data services at home. As such, 
the general trend is in the direction that all customers, 
both residential and business, will demand high quality 
voice and data services. 

10 A problem that arises in conventional Code Division 
Multiple Access communications systems relates to system 
capacity constraints imposed by the finite number of 
available pseudonoise (pn) spreading codes. This problem is 
compounded when two pn codes are used in one channel for 

15 spreading (and despreading) the Inphase (I) and the 
Quadrature (Q) symbol pairs. 

Another problem in conventional communication systems 
relates to the transmission of control messages. Typically, 
control messages are put on a queue for earliest 

20 transmission, and frame structures are typically designed 
to transmit all control messages for a particular frame in 
a single block either at the beginning or end of the frame. 
However, this approach adds a delay in order to transmit 
all control for a particular frame in a single block either 

25 at the beginning or end of the frame. For example, if a one 
byte message is at the top of the queue when a new frame 
ends, this message cannot be transmitted for an entire 
frame until the next block is ready to be sent. In this 
case, the delay would be an entire frame. 

30 OBJECTS AMD ADVANTAGES OF THE INVENTION! 



It is a thus a first object and advantage of this invention 
to provide an improved fixed wireless loop system that 
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fulfills the foregoing and other needs and requirements. 

It is a further object and advantage of this invention to 
provide an improved fixed wireless loop system that 
exhibits an improved use of pn codes, and that furthermore 
overcomes the control message related delay problem. 

SUMMARY OF THE INVENTION 

The foregoing and other problems are overcome and the 
objects and advantages are realized by methods and 
apparatus in accordance with embodiments of this invention. 

Disclosed is a method for transmitting information in a 
CDMA communication system, the method including steps of 
(a) multiplexing data and control information into a data 
stream; fb) encoding the data stream to form a stream of 
encoded I/Q symbol pairs; (c) inserting synchronization 
information into the stream of encoded I/Q symbol pairs; 
and (d) spreading the encoded I/Q symbol pairs and the 
inserted synchronization information using a same 
pseudonoise (pn) spreading code prior to transmission as a 
frame. 

The step of multiplexing forms a data stream having data 
fields comprised of a plurality of data bytes separated by 
control message fields each comprised of a single byte of 
a control message frame. The control message frame includes 
a control message header field, a plurality of control data 
fields, and a plurality of data integrity fields. 

More particularly, the frame is comprised of an unencoded 
synchronization field followed by a plurality of data 
fields each comprised of a plurality of data bytes. 
30 Individual ones of the plurality of data fields are 
separated by a control message field. Individual ones of 
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the control message fields are comprised of a single byte 
of the multi-byte control message frame. 

In the preferred embodiment of this invention the step of 
encoding includes steps of (a) rate 1/2 convolutionally 
5 encoding the data stream to form an I channel and a Q 
channel; and (b) rate 4/5 punctured trellis coding the I 
and Q channels. 

BRIEF DESCRIPTION OF THE DRAWIKGS 

The above set forth and other features of the invention are 
10 made more apparent in the ensuing Detailed Description of 
the Invention when read in conjunction with the attached 
Drawings, wherein: 

Fig. 1 is a simplified block diagram of a synchronous, DS- 
CDMA fixed wireless communications system in accordance 
15 with this invention, the system having a radio base unit 
(RBU) and a plurality of transceiver or subscriber units 
(SUs) . The RBU transmits a side channel to the SUs, and 
also receives an essentially asynchronously transmitted 
side channel from the SUs. 

20 Fig. 2 is an exemplary frequency allocation diagram of the 
system of Fig. 1. 

Fig. 3 is a block diagram illustrating the RBU and SU of 
Fig. 1 in greater detail. 

Fig. 4 illustrates a presently preferred frame structure 
25 having data fields interspersed with control message frame 
fields. 

Figs. 5A and 5B illustrate portions of the RBU transmit and 
receiver circuitry, respectively, in greater detail. 
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DETAILED DESCRIPTIOM OF THE INVEMTION 

By way of introduction, and referring to Pig. 1, a Fixed 
Wireless System (FWS) lo in accordance with a preferred 
embodiment of this invention is a bespoke system based on 
digital radio technology. Specifically, the FWS 10 employs 
direct sequence spread spectrum based CDMA techniques over 
an air link to provide local access to subscribers. It 
offers very high quality, highly reliable service at costs 
that are very competitive with wireline solutions. The FWS 
10 exhibits high spectral efficiency and thus can provide 
good wireline quality service with limited available 
bandwidth. A large dynamic range allows the FWS 10 to be 
deployable in a pico, micro, or mini cellular architecture 
meeting specific needs of dense metropolitan, urban, and 
suburban communities in an economical way. 

Some important attributes of the FWS 10 include: wireline 
voice quality delivered at 32 Kbps; high throughput for 
data and fax applications with 32/64 Kbps throughput; high 
service reliability with good tolerance for noise and 
ingress; secure airlink; and support of enhanced services 
such as priority/ emergency calling, both inbound and 
outbound . 

The FWS 10 has a three to five times capacity advantage 
over conventional asynchronous CDMA technologies, and a 
three to seven times capacity advantage over currently 
available Time Division Multiple Access (TDMA) technology, 
due to its ability to use a frequency reuse of one. 

The FWS 10 is a synchronous CDMA (S-CDMA) communications 
system wherein forward link (FL) transmissions from a radio 
base unit (RBU) 12 for a plurality of transceiver units, 
referred to herein as user or subscriber units (SUs) 14, 
are symbol and chip aligned in time, and wherein the SUs 14 
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operate to receive the FL transmissions and to synchronize 
to one of the transmissions. Each SU 14 also transmits a 
signal on a reverse link (RL) to RBU 12 in order to 
synchronize the timing of its transmissions to the RBU 12, 
5 and to generally perform bidirectional communications. The 
FWS 10 is suitable for use in implementing a 
telecommunications system that conveys voice and/or data 
between the RBU 12 and the SUs 14. 

The SU 14 forms a portion of a Customer Premises Equipment 
10 (CPE) . The CPE also includes a Network Termination Unit 
(NTU) and an Uninterruptible Power Supply (UPS), which are 
not illustrated in Fig. 1. 

The RBU 12 includes circuitry for generating a plurality of 
user signals (USER_l to USER_n} , which are not shown in 

15 Fig. 1, and a synchronous side channel (SIDE_CHAN) signal 
that is continuously transmitted. Each of these signals is 
assigned a respective pn spreading code and is modulated 
therewith before being applied to a transmitter 12a having 
an antenna 12b. When transmitted on the FL the 

20 transmissions are modulated in phase quadrature, and the 
SUs 14 are assumed to include suitable phase demodulators 
for deriving in-phase (I) and quadrature (Q) components 
therefrom. The RBU 12 is capable of transmitting a 
plurality of frequency channels. By example, each frequency 

25 channel includes up to 128 code channels, and has a center 
frequency in the range of 2 GHz to 3 GHz. 

The RBU 12 also includes a receiver 12g having an output 
coupled to a side channel receiver 12d. The side channel 
receiver l2d receives as inputs the spread signal from the 
receiver 12c, a scale factor signal, and a side channel 
despread pn code. These latter two signals are sourced from 
a RBU processor or controller 12e. The scale factor signal 
can be fixed, or can be made adaptive as a function of the 
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number of sus 14 that are transmitting on the reverse 
channel. The side channel receiver 12d outputs a detect/not 
detect signal to the RBU controller 12e for indicating a 
detection of a transmission from one of the SUs 14, and 
5 also outputs a power estimate value X/ as described below. 
A read/write memory (MEM) 12f is bidirectionally coupled to 
the RBU controller 12 e for storing system parameters and 
other information, such as SU timing phase information and 
power estimate values. 

10 A Network Interface Unit (NIU) 13 connects the RBU 12 to 
the public network, such as the public switched telephone 
network (PSTN) 13a, through analog or digital trunks that 
are suitable for use with the local public network. The RBU 
12 connects to the NIU 13 using El trunks and to its master 

15 antenna 12b using a coaxial cable. The SU 14 communicates 
with the RBU 12 via the radio interface, as described 
above . 



In addition, the FWS 10 has an Element Management System or 
EMS (not depicted) that provides Operations, 
Administration, Maintenance, and Provisioning (OAM&P) 
functions for the NIU 13 and RBU 12. The functioning of the 
EMS is not germane to an understanding of this invention, 
and will not be further described in any great detail. 

The NIU 13 is the interface to the public network for the 
system 10. Its primary purpose is to provide the specific 
protocols and signaling that are required by the public 
network. These protocols can vary by country as well as by 
customer, and possibly even by the connecting point in the 
network. 



In a preferred embodiment of this invention the NIU 13 can 
connect to a maximum of 15 RBUs 12 using one to four El 
connections per RBU 12, with four El connections being used 
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for a fully populated RBU 12. In addition, each NIU 13 is 
sized for up to, by example, 10,000 subscribers. Time Slot 
16 on each El trunk is used for passing control information 
between the NIU 13 and the attached RBUs 12, as well as for 
5 passing information to and from the controlling EMS. The 
protocol is based on the HDLC format and optimized to 
enhance RBU-NIU communication. 

Specific functions provided by the NIU 13 include: 
initialization of the RBU 12; provisioning of dial tone and 

10 DTMF to the SUs 14; set up and tear down of voice and data 
calls; maintenance of Call Detail Record (CDR) data; HDLC 
Protocol (data link protocol to RBU Link Control 
Processor) ; billing system interface; Common Channel 
Signaling (CCS) for ringing and onhook/of fhook detection; 

15 glare detection in NIU, RBU, and SU; call priority 
management; channel reassignment for calls in progress; 
detection of hook flash to enable plain old telephone 
service (POTS) and enhanced POTS calling features; 32/64 
Kbps rate change initialization; pay phone capability 

20 (12/16 KHz tone detection, line reversal) ; priority and 
emergency number calling; accommodation of country specific 
signaling interfaces such as E&M, Rl, R2, R2 variants, and 
C7; and system modularity: analog/digital options for both 
line side and trunk side. 

25 The normal mode of operation for the SU 14 is a compressed 
speech mode using ADPCM encoding according to the ITU-T 
G.721 standard. This toll quality, 32 Kbps service is the 
default used whenever a non-X.21 channel is established 
with the RBU 12 (X.21 channels are configured a priori when 

30 provisioned by the EMS/NIU) . The 32 Kbps channels may be 
used for voice band data up to 9600 b/s if desired. When 
the channel rate bumps to 64 Kbps PCM encoded voice/data 
due to detection of a fax/modem start tone, fax and modem 
rates of at least 33.6 Kbps are possible. 
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The SU-RBU air link provides a separate 2.72 MHz (3.5 MHz 
including guardbands) channel in each direction separated 
by either 91MHz or 119 MHz of bandwidth. The nominal 
spectrum of operation is 2.1-2.3 GHz or 2.5-2.7 GHz. 

5 However, the system is designed such that the frequency can 
be varied from 1.8 to 5 Gilz provided the spectral mask and 
separation between transmit and receive frequencies is 
maintained as per ITU 283.5 specification. As per the ITU 
283.5 specification, there are a total of 96 frequency 

0 pairs allowed, as shown in Fig. 2. By example, the RBU 12 
may transmit in the 3 ' frequency band and receive in the 3 
frequency band, and the su 14 transmits in the 3 frequency 
band and receives in the 3' fiequency band. 

5 The RBU 12 can support 128 simultaneous 34 Kbps channels 
using the 2.72 MHz bandwidth giving it a spectral 
"efficiency of 1.6 bits/Hz. of this total capacity, 8 
channels are used by the FWS 10 and an additional 2 Kbps 
per channel is system overhead. Thus the effective traffic 

0 carrying capacity is 12 0 channels at 3 2 Kbps. 

The spectral efficiency of the FWS 10 is three to five 
times that of conventional CDMA systems primarily because 
the FWS 10 employs bi-directional Synchronous CDMA. 
Competing systems, including those based on IS-95, are 
5 asynchronous or synchronous only in one direction. The bi- 
directional synchronicity permits the FWS 10 to use near 
orthogonal spreading codes and gain maximum possible data 
carrying capacity. 

Radio emissions lose energy as they travel in air over long 
3 distances. In order to ensure that the received signal 
energy from a distant subscriber is not completely 
overwhelmed by that of a near subscriber, the RBU 12 
controls the power level of the SUs 14. In the preferred 
embodiment only the reverse channel power (from SU 14 to 
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the RBU 12) is controlled by the RBU 12. The power control 
is primarily established at SU 14 initialization. 

Subsequent power adjustments are infrequent and are made in 
response to transient environmental conditions. The closed 
loop power control is implemented by comparing against a 
desired power level and making incremental adjustments 
until the desired level is achieved. 

The forward channel power control is not needed since each 
SU 14 receives its entire signal at only one level. The RBU 
12 merely needs to ensure that the received signal strength 
by the farthest SU 14 is sufficient for its application. 

It is not always desirable to have an extended range. In a 
dense urban or even a suburban setting, one needs to deploy 
the system in a cellular architecture as depicted below. To 
reduce interference between sectors and between cells in 
such a deployment, the range of the RBU is limited overall 
as well as selectively in specific directions. Such range 
control may be accomplished using a directional master 
antenna 12b at the RBU 12, as well by controlling overall 
RBU power. 

When one of the SUs 14 detects an off-hook (the user has 
picked up the phone) , it transmits an outgoing call request 
on one of six reverse synchronous side channels in a 
Slotted ALOHA fashion. The side channel is chosen at 
random. The RBU 12 processes the request and, providing an 
active channel is available, sends an outgoing call reply 
to the SU 14 which contains the active channel codes (both 
forward and reverse) . in the meantime, the RBU 12 begins to 
transmit forward side channel data on the newly activated 
channel and at a given time, begin to transmit the active 
call data. The SU 14, which is listening to the forward 
side channel, receives the active channel assignment and 
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switches at a superframe boundary to the active codes. The 
SU 14 then begins to receive the side channel data and then 
the active call data. 

When an incoming call is received by the NIU 13 for one of 
5 the SUs 14 in the local loop, the RBU 14 is notified over 
the El link. The RBU 12 first checks to determine if the 
intended SU 14 is busy. If not, the RBU 14 sends a message 
to the SU 14 on the forward side channel, the message 
containing the active channel codes. The call processing 
10 then continues in the same manner as the outgoing call 
processing discussed above. 

If all channels are busy and the NIU 13 receives an 
incoming call for a non-busy SU 14, it provides a 
subscriber busy tone to the caller unless the called SU has 

15 priority inbound access (such as a hospital, fire station, 
or police) , in which case the NIU 13 instructs the RBU 12 
to drop the least priority call to free up a channel for 
the called SU 14. Similarly, if an SU 14 initiates a 
request for service and no traffic channels are open, then 

20 the RBU 12 provides the dial tone on a temporary traffic 
channel and receives the dialed number. If the dialed 
number is an emergency number the RBU 12 drops a least 
priority call to free up a traffic channel and connects the 
free channel to the SU 14. If the called number is not an 

25 emergency number then the SU 14 is provided a special busy 
tone indicating a "wait for service" condition. 

Reference is now made to Fig. 3 for illustrating the RBU 12 
and SU 14 in greater detail. 

An incoming call from the PSTN 13a passes through the NIU 
3 0 13 to 64 Kbps per channel El trunks 13b and then to a RBU- 
resident El interface 20. The El interface 20 optionally 
performs an A-Law ADPCM algorithm for the compression of 
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the 64 Kbps channel to a 32 l-Oops channel that is placed on 
a PPCM highway 21 time slot. If the A- Law ADPCM compression 
is bypassed, the 64 Kbps channel is split into two 32 Kbps 
channels and placed onto the PPCM Highway 21. In the 
preferred embodiment the RBU 12 can accommodate up to 128 
3 2 Kbps channels, and each SU 14 can accommodate up to four 
32 Kbps channels. The PPCM Highway 21 operates in 
conjunction with a frame synchronization (FrameSync) signal 
20a, which represents a master timing pulse that is 
generated every 16 ms. All calls to and from the RBU 12 
pass through the PPCM Highway 21 and the El interface 20. 
For the case of an incoming call the signal is applied to 
a baseband combiner (BBC) 22 and thence to a D/A converter 
24 and a transmit radio frequency front-end (RFFE) 26 
before being applied to the antenna 12b for transmission to 
the SU 14. At the SU 14 the incoming call signal is 
received by the antenna 14a and is applied to a receive 
RFFE 34, an A/D 36, demodulator 38 and a receiver 40. The 
SU 14 includes a subscriber line interface circuit (SLIC) 
42 that couples a pulse code modulation (PCM) Highway 43 to 
a network termination unit (NTU) 52. In the . reverse 
direction a call originates at the NTU 52 and passes 
through the SLIC 42 and PCM Highway 43 to a transmitter 44, 
modulator 46, D/A converter 48 and a transmit RFFE 50. The 
signal is applied to the SU antenna 14a and is received by 
the RBU antenna 12b. The received signal is applied to a 
receive RFFE 28, A/D converter 30, a demodulator and 
synchronization unit 32, and then to the PPCM Highway 21 
and El interface 20 for connection to the PSTN 13a via one 
of the El trunks 13b and the KIU 13. 

The RBU 12 controls the master timing for the entire FWS 
10. Timing throughout the FWS 10 is referenced to the 
periodic timing pulse generated at the PPCM Highway 21, 
i.e., to the FrameSync signal 20a. In the FWS 10 all data 
is grouped into equal-sized packets referred to as frames. 
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which in turn are grouped into super- frames with, for 
example, three frames making up one super-frame. 

Reference is now made to Figs. 5A and 5B for illustrating 
the presently preferred S-CDMA waveform generation 
circuitry. In the RBU 12 both data {3 2 Kbps) and control 
messages (1.5 Kbps) are multiplexed into a single bit 
stream (34 Kbps) using a multiplexer (Mux) 53, The data 
stream is rate 1/2 convolutionally encoded at block 54 and 
then punctured to 4/5ths (a rate 4/5 punctured trellis 
code) in block 56 thereby producing I and Q symbol pairs. 
Un-encoded SYNC words (312.5 symbols/sec, I SYNC and Q 
SYNC) are then inserted at the beginning of each frame in 
the SYNC insertion MUX 58. The resulting I/Q symbol pairs 
(21.25 K symbols/sec) are spread in spreaders 60A and 60B, 
respectively, using, in accordance with an aspect of this 
invention, identical pn codes for both I and Q. The 
resulting chip waveform (2.72 M chips/sec) is then 
presented to the D/A converter 24 and transmit RFFE 2 6 
where the waveform is upconverted to the transmit 
frequency. 

The waveform is identical for both the Forward (downlink) 
and Reverse (uplink) channels, except that in the forward 
direction every third sync word is inverted. The inverted 
sync word enables the SU 14 to determine where superframe 
boundaries occur. In the reverse direction the sync words 
are not inverted, as the RBU 12 already has knowledge of 
where the superframe boundaries occur. The reverse channel 
is, however, superframe synchronous so that the side 
channels can operate using a slotted ALOHA multiple access 
protocol. The reverse channel side channel bursts always 
begin and end on superframe boundaries. 

The RF receiver of Fig. 5B downconverts the received signal 
to baseband. The baseband signal is despread in. 
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despreaders 62A and 62B, again using identical pn codes, 
and accumulated in accumulators 64A and 64B for a symbol 
period, resulting in I and Q soft symbol decisions. The I/Q 
soft decisions are presented to a SYNC detection and 

5 removal circuit block 66. This circuitry of block 66 
generates a Frame synchronization signal that is used by a 
depuncture block 68 and a Viterbi decoder 7 0 for frame 
synchronization. The I/Q soft decisions are presented to 
the depuncture block 68 where punctured data is reinserted. 

0 The I/Q output of depuncture block 68 is input to the 
Viterbi decoder 70 which accepts I/Q symbols and outputs 
received Data and Control. From the Frame synchronization 
signal, a Control Frame synchronization signal is generated 
by block 72. This signal is used by demultiplexer (DEMUX) 

5 74 to separate the Data from the Control messages. 

By using the same pn codes for both the I and Q channels 
the capacity of the FWS 10 is doubled wlien compared to a 
system that uses separate I and Q pn codes. 

0 Referring to Fig. 4, Data and Control messages are 
contained in 16 ms frames 80. Each 16 ms frame 80 is 
comprised of four, 16-byte blocks or fields of data 80A and 
three 1-byte control (CTRL) blocks or fields SOB. A single 
control message frame 82 is comprised of a plurality of 

5 one-byte fields, specifically a control message header 
field which can be used to identify a type of control 
message, two control data fields, and two CRC (XOR 
encryption) data integrity fields. The number of fields may 
be varied. The control message frame 82 requires more than 

3 one data frame 80 to be completely transmitted. Each data 
frame 80 begins with a l-byte synchronization (SYNC) word 
80B. The SYNC word 80C is not encoded. Rather, it is 
inserted at the symbol rate in the SYNC insertion MUX 58, 
after puncturing, and is removed in the SYNC detection and 

5 removal block 66 before depuncturing and decoding. The 
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SYNC word 8 0C is used by the RBU receiver to obtain frame 
synchronization. The SYNC word 80C is also used by the 
Viterbi decoder 70 to resolve any I/Q phase ambiguity 
resulting from the up and down conversion at RF, 

As was discussed earlier, in conventional approaches the 
control messages are put on a queue for earliest 
transmission, and the frame structures are typically 
designed to transmit all control for a particular frame in 
a single block either at the beginning or end of the frame. 
However, this approach adds a delay to transmit all control 
for a particular frame in a single block either at the 
beginning or end of the frame, and thus adds delay to 
messages and telephony data at the receiver. 

In accordance with the frame structure shown in Fig. 4 a 
control message does not have to be delayed by an entire 
frame. Instead, it can be transmitted in the first of three 
1 byte control blocks that are interspersed with the frame 
data fields 80A, resulting in a significant reduction in 
latency. This also has the effect of minimizing the delay 
experienced by the telephony data. That is, by sending the 
control messages in "packets" within the data frame 80, the 
telephony data experiences less delay. This feature 
enables the FWS 10 to implement tighter control loops as 
well as to decrease the time required to establish and 
tear-down channels. 

While the invention has been particularly shown and 
described with respect to preferred embodiments thereof, it 
will be understood by those skilled in the art that changes 
in form and details may be made therein without departing 
from the scope and spirit of the invention. 
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CLAIMS 

What is claimed is: 

1. A method for transmitting information in a Code 
Division Multiple Access communication system, comprising 
steps of: 

multiplexing data and control information into a data 
stream ; 

encoding the data stream to form a stream of encoded 
1/Q symbol pairs; 

inserting synchronization information into the stream 
of encoded I/Q symbol pairs; and 

spreading the encoded I/Q symbol pairs and the 
inserted synchronization information using a same 
pseudonoise (pn) spreading code prior to transmission 
as a frame. 

2. A method as in claim 1, wherein the step of 
multiplexing forms a data stream having data fields 
comprised of a plurality of data bytes separated by control 
message fields each comprised of a single byte of a control 
message frame. 

3 . A method as in claim 2 , wherein the control message 
frame is comprised of a control message header field, a 
plurality of control data fields, and a plurality of data 
integrity fields. 

4. A method as in claim 1, wherein the frame is 
comprised of an unencoded synchronization field followed by 
a plurality of data fields each comprised of a plurality of 
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data bytes, individual ones of said plurality of data 
fields being separated by a control message field each of 
which is comprised of a single byte of a multi-byte control 
message frame. 

5. A method as in claim 1, wherein the step of 
encoding includes steps of: 

rate 1/2 convolutionally encoding the data stream to 
form an I channel and a Q channel ; and 

rate 4/5 punctured trellis coding the I and Q 
channels . 

6. A method for transmitting information in a Code 
Division Multiple Access communication system, comprising 
steps of: 

multiplexing data and control information into a data 
frame having data fields comprised of a plurality of 
data bytes separated by control message fields each 
comprised of a single byte of a multi-byte control 
message frame; 

encoding the data frame; 

inserting an unencoded synchronization field into the 
data frame ; 

spreading the data frame using a spreading code; and 
transmitting the spread data frame to a receiver. 

7. A method as in claim 6, and further comprising 
steps of: 
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receiving and despreading the transmitted data frame; 
synchronizing to the synchronization field; 
decoding the data frame; and 

demultiplexing the data fields from the control 
message fields, 

8. A method as in claim 7, wherein the control message 
frame includes a control message header field, a plurality 
of control data fields, and a plurality of data integrity 
fields. 

9. A method as in claim 6, wherein the step of 
encoding includes steps of; 

rate 1/2 convolutionally encoding the data frame to 
form an I channel and a Q channel; and 

rate 4/5 punctured trellis coding the I and Q 
channels . 

10. A synchronous CDMA fixed wireless system comprised 
of a radio base unit (RBU) coupled to a telecommunications 
network and to a plurality of subscriber units (SUs) that 
communicate over CDMA radio channels, said RBU comprising: 

a first multiplexer for multiplexing data and control 
information intended for one SU into a data frame 
having data fields comprised of a plurality of data 
bytes separated by control message fields each 
comprised of a single byte of a multi-byte control 
message frame; 



an encoder for encoding the data frame and forming 
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encoded I/Q symbol pairs; 

a second multiplexer for inserting unencoded I/Q 
symbol pairs of a synchronization field into the 
encoded I/Q symbol pairs to form a multiplexed I/Q 
symbol pairs stream; 

a spreader for spreading the multiplexed I/Q symbol 
pairs stream using one pn spreading code; and 

a transmitter for transmitting the spread multiplexed 
I/Q symbol pairs stream as a frame to the intended SU. 

11. A system as in claim 10, wherein the said encoder 
comprises: 

a rate 1/2 convolutional encoder; and 

a rate 4/5 punctured trellis coder. 

12. A system as in claim 10, wherein said transmitted 
frame is comprised of an unencoded synchronization field 
followed by a plurality of data fields each comprised of a 
plurality of data bytes, individual ones of said plurality 
of data fields being separated by a control message field 
each of which is comprised of a single byte of a multi-byte 
control message frame. 
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POINT-TO-MULTIPOINT TRANSMISSION IN A MOBILE COMMUNICATION SYSTEM 

BACKGROUND OF THE INVENTION 

The invention relates to point-to-multipoint transmissions in a mobile 

communication system and, more particularly, to point-to-multipoint 
5 transmissions wfiich have to be acknowledged. 

Mobile communication systems have been developed in order to 

free people from fixed telephone terminals without hindering their reachability. 

Coinciding with the increased use of various data transmission services at 

offices, a plurality of data services has also appeared in mobile communication 
10 systems. Mobile networks for their part provide a user with an efficient access 

network for mobile data transmission, the network giving the user access to 

the actual data networks. On this account, various new forms of data services 

are being designed for the current and future mobile communication networks. 

Digital mobile communication systems, like the Global System for Mobile 
15 Communication GSM, are particularly suitable for supporting mobile data 

transmission. 

The General Packet Radio Service GPRS is a new sen/ice in the 
GSM system and one of the objects of GSM Phase 2+ standardization at ETSI 
(European Telecommunication Standard Institute). The GPRS allows packet 

20 data transmission to be established between mobile data terminals and 
external data networks, with the GSM network functioning as an access 
network. One of the requirements set for the GPRS is that it must intenwork 
with different types of external data networks, such as the Internet or the X.25. 
networks. In other words, the GPRS and the GSM network should be able to 

25 serve all users, irrespective of which type of data networks the users wish to 
enter through the GSM network. This means that the GSM network and the 
GPRS must support and process various types of network addressing and 
data packet formats. The processing of data packets also comprises their 
routing in a packet radio network. Further, users should be able to roam from 

30 the GPRS home network to another GPRS network, whose operator backbone 
network may support a protocoi (e.g. CLNP) different from that of the home 
network (e.g. X.25). The GPRS network architecture is illustrated in Figure 1. 

The GPRS supports both point-to-point and point-to-multipoint 
transmissions. The aim of a point-to-multipoint transmission is to allow a 

35 sender to transmit data to recipients in a destination area by using one service 
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request. The term 'data' refers in this application to any information to be 
conveyed in a digital telecommunication system. The information may 
comprise digitized speech, inter-computer data communication, telefax data, 
short program code segments etc. The destination area is a geographical area 
5 determined by the sender. The destination area is determined either in the 
service request or when the starting of a point-to-multipoint transmission is 
notified. 

To control point-to-multipoint transmissions the GPRS network 
typically comprises a Point-To-Multipoint Service Centre PTM-SC, which is an 

10 essential element in the point-to-multipoint service. The centre receives 
service requests from a Service Requester and transmits the service to its 
service area via the Serving GPRS Support Node SGSN. Actual point-to- 
muitipoint services supported by the GPRS are Point-to-Multipoint Multicast 
PTM-IVl and Point-To-Multipoint Group call PTM-G. In the GPRS system, the 

15 term 'group' refers to several mobile stations which have registered with the 
same International Mobile Group Identifier IMGI. Groups can either be open or 
dosed. An open group can be joined by anyone, whereas a closed group 
includes only the subscribers who have been defined to belong to the group in 
the service centre PTM-SC. Besides the actual point-to-multipoint 

20 transmissions, the GPRS supports IP Multicast IP-M according to the Internet 
protocol. 

A PTM multicast PTM-M is broadcast in all the cells belonging to 
the destination area. It can be directed to all mobile stations in the cells or to 
mobile stations belonging to a certain group. A PTM multicast is unidirectional, 

25 non-encrypted and unreliable. Thus, anyone can listen to the transmission and 
the sender cannot l<;now, whether the receiver/s has/have received the 
message. A message to be transmitted as a PTM multicast includes 
scheduling information. Scheduling information comprises the starting time, 
the end time and the frequency rate of the transmission. If the starting time 

30 zero is given, it deals with a real time transmission. Real time means that a 
message received from the service requester is transferred as quickly as 
possible. Transmission rate and transmission time delay vary depending on 
the loading of the network elements. If each piece of scheduling information is 
marked with zero, it deals with a real time single transmission. If the starting 

35 time is other than zero, it deals with a delayed transmission. On the basis of 
the time difference between the starting and end time and of the frequency 
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rate, the service centre PTM-SC calculates the number of transmission 
repetitions and the time slot between the repetitions. By using this information, 
PTIVI-SC controls the transmissions of the message. The end time is only used 
in calculating the control information of the above mentioned transmissions. 
5 A PTM group call PTM-G is transmitted in the cells of the 

destination area which include at least one mobile station registered to the 
group. Only a mobile station registered to the group in the area of a serving 
support node SGSN can receive messages of a group call and decode the 
encryption. Thus, the network is aware of the location of the registered mobile 

10 stations, A PTM group call can be transmitted as a broadcast, a point-to-point 
transmission or as a combination of these. A group call is always 
individualised by the mobile group identity IMGI. In a PTM group call, a 
transmission is either uni-, bi- or multidirectional, encrypted and reliable. 
Usually the messages of a PTM group call are transferred in real time. It is 

15 also possible to employ a delayed transmission and/or repeated transmissions 
as in the PTM multicast. Since a PTM group call is reliable, at least a 
broadcast group call must be acknowledged. In case of a negative 
acknowledgement, a mobile station transmits the acknowledgement only if it 
notices that it has not received the previous PTM message or messages. In 

20 such a case, the service centre transmits the missing messages to it. In case 
of a positive acknowledgement, each PTM message is acknowledged 
individually. A positive acknowledgement is especially applicable to cases in 
which the reliability requirements are strict. In both manners of acknowledging, 
each acknowledgement transmitted by a mobile station is conveyed via the 

25 serving support node SGSN to the service centre, which decides on the 
following actions on the basis of the acknowledgements. At the end of the 
PTM group call, the service centre PTM-SC transmits a report to the sen/ice 
requester. 

On the basis of what is described above, a problem arises that a 
30 point-to-multipoint message can only be transmitted after the content of the 
message has already gone out of date. This is the case particularly in the 
transmissions which have to be repeated and transmitted as scheduled. On 
the other hand, a group message which has to be acknowledged cannot be 
delivered to the mobile stations which have not received it at the time of the 
35 actual transmission, although the mobile stations arrived at the destination 
area during the time the content of the message has not yet gone out of date. 
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BRIEF DESCRIPTION OF THE INVENTION 

It is thus the object of the invention to provide a method and an 
apparatus implementing the method in such a way that the above problems 
can be eliminated. The objects of the invention are achieved by a method, 
5 which is characterized by determining a life time for a message, and deleting 
the message from a buffer in response to the expiry of the life time. 

The term 'buffer' refers herein to a memory, in which the message 
is temporarily stored to wait for forwarding and/or successive transmissions. 

The invention also relates to a mobile communication system, to 

10 which the method of the invention can be applied. The system comprising at 
least one service centre PTM-SC to transmit a message as a point-to- 
multipoint transmission and at least one network element SGSN via which the 
message is transmitted to cells belonging to a destination area is 
characterized in that the service centre PTM-SC is arranged to determine the 

15 remaining life time of the message and to check before transmitting the 
message, whether there is life time left and to transmit the message only if 
there is still life time left. 

The invention further relates to a network element of a mobile 
communication network, by which network element the method of the 

20 invention can be applied. The network element is characterized in that it 
comprises means for determining the remaining life time of a message to be 
transmitted point-to-multipoint, and means for transmitting said message 
according to the scheduling of the message, if there is still life time left. 

The invention is based on giving a message a precise life time. As 

25 the life time expires, the message will not be transmitted anymore. At its 
simplest, this is ensured by deleting the message from the transmission buffer. 
This provides the advantage that the service requester may transmit fairly 
short-lived information as a point-to-multipoint transmission, because the 
requester knows that everyone receives the information before it goes out of 

30 date. A dated message is deleted from the group of messages to be 
transmitted, even if it had not been transmitted at all because of the great 
transmission delays. This saves the network resources and the recipients do 
not receive unnecessary messages. 

in a preferred embodiment of the invention relating to group calls 

35 transmitted as calls to be acknowledged, it is checked whether a 
predetermined part of the group members has acknowledged the message, 
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and if it has, the message will not be transmitted anymore. This provides the 
advantage that the message transmitted as a group call will not be 
unnecessarily retransmitted. This saves the network from unnecessary 
loading. 

5 In a preferred embodiment of the invention, in which a message is 

received from another network element, the acknowledgement transmitted to it 
includes information on the group members who have received the message. 
This provides the advantage that the loading of the network decreases 
substantially. In known prior art solutions, acknowledgements are transmitted 

10 individually to the service centre PTM-SC. The acknowledgements differ from 
each other only in respect of the subscriber identification data. When using 
positive acknowledgements in particular, the loading of the network 
decreases. If e,g. the support node SGSN succeeds in transmitting a PTM 
group call to x subscribers, it only conveys one acknowledgement, instead of x 

1 5 acknowledgements, to the service centre PTM-SC. 

In a preferred embodiment of the invention, the service centre 
attempts during the whole life time of the message to transmit the message to 
those group members who become reachable during the life time of the 
message and have not yet received the message. This provides the 

20 advantage that a long life time of a message allows the service requester to 
ensure that as many group members as possible get the important message. 
An effort is not, however, made to resend the message to those who have 
already received it. This saves the network resources. 

The preferred embodiments of the method, system and network 

25 element of the invention are disclosed in the attached dependent claims. 

LIST OF FIGURES 

In the following the invention will be described in greater detail in 
connection with the preferred embodiments, with reference to the attached 
30 drawings, in which 

Figure 1 shows a block diagram of some elements in a packet radio 
system of the invention. 

Figure 2 shows a flow chart of an operation in a serving support 
node SGSN according to a first preferred embodiment of the invention, and 
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Figure 3 shows a flow chart of an operation in a service centre 
PTM-SC according to the first preferred embodiment of the invention. 



DETAILED DESCRIPTION OF THE INVENTION 
5 in the following, the preferred embodiments of the invention will be 

described by means of GPRS packet radio networks yet without restricting the 
invention to such a specific packet radio system. The invention is applicable to 
all mobile communication systems in which point-to-multipoint transmissions 
are possible, e.g. to the third-generation mobile communication systems 

10 UMTS (Universal Mobile Telecommunication System) and IMT-2000 
(International Mobile Telecommunication 2000) which are under development. 
It is to be noticed tliat the packet radio network only provides a physical 
connection between the PTM service centre and the service recipient, and the 
exact operation and structure of the network have no substantial meaning for 

15 the invention. The specifications of mobile communication systems in general 
and of the GPRS system in particular evolve fast. Various functionalities of the 
network elements may change. Therefore, all terms and expressions should 
be interpreted as widely as possible, and they are intended to describe and 
not to limit the invention. 

20 Figure 1 shows an example of a GPRS packet radio network PLMN. 

A GPRS operational environment 1 comprises one or more subnetwork 
service areas, which are connected to each other by an Intra-GPRS Backbone 
Network 2. A subnetwork comprises a set of packet data service nodes SN, 
which are herein called serving GPRS support nodes SGSN, each of which is 

25 connected to a GSM mobile communication network 3, and typically to its 
base station systems BSS, in such a way that it is able to provide mobile 
stations MS with a packet data service via various base stations, i.e. cells. A 
mobile station refers herein to the entity of a mobile communication network 
subscriber and a data terminal equipment. The mobile communication network 

30 3 between them provides packet-switched data transmission between the 
support node and the mobile stations. 

On the network side, each support node SGSN controls certain 
functions of the packet radio service in the area of one or more cells in a 
cellular packet radio network. Such functions are e.g. logging of the mobile 

35 stations MS in and out of the system, updating routing zones of the mobile 
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Stations MS and routing of data packets to their correct destinations. The 
mobile station MS located in the cell communicates through the mobile 
communication network with the support node SGSN that constitutes the 
service area for the cell. The functions of the serving support node SGSN 
5 according to the first preferred embodiment of the invention are described in 
more detail later in connection with Figure 2. 

The different subnetworks in turn are connected to an external data 
network 4, e.g. to a packet switched public data network PSPDN, the Internet 
network or to the integrated services digital network ISDN, via specific 

10 gateway GPRS support nodes GGSN. Thus, the GPRS provides packet data 
transmission between mobile data terminal equipment and external data 
networks with the GSM network 3 serving as an access network. The different 
mobile communication networks are connected to each other by an Inter- 
GPRS Backbone Network 5. The GPRS operational environment 1 comprises 

15 a Border Gateway BG situated on the connection between the mobile 
communication networks. The GPRS subscriber data and the routing 
information are stored in the home location register HLR of the GSM network. 

To control point-to-multipoint transmissions the GPRS network 
typically comprises a point-to-multipoint service centre PTM-SC. The service 

20 centre PTM-SC is the central element in the point-to-muiti point service and it is 
responsible for the geographical routing of messages. It receives service 
requests from the service requester SR and transmits the ser\/ice via the 
support node/s SGSN of its service area. In other words, it takes care of the 
scheduling, transmission and retransmission of messages according to given 

25 parameters. The functions of the service centre according to the first preferred 
embodiment of the invention are described in more detail in connection with 
Figure 3. Some of the service centre functions can be decentralized into other 
network elements, e.g. into the support node SGSN which can take care of at 
least some of the transmissions in the system of the invention. So far, GPRS 

30 specifications do not determine how a PTM service centre is connected to a 
network. Figure 1 shows one alternative, in which the PTM service centre is 
connected to the internal backbone network 2. 

In the system of the invention, the service requester SR is not 
limited in any way. The service requester can thus be an independent service 

35 provider transmitting its service request via other networks 4. The sen/ice 
requester SR can also have a direct connection to the service centre PTM-SC 
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located in the network, as shown in the example of Figure 1. The service 
requester can also be a network element or a terminal, whose service request 
is forwarded to the service centre PTM-SC. Further, it can be some other 
service centre PTM-SC. 
5 To implement the invention, any equipment changes do not need to 

be made to the network structure described above. The service centre PTM- 
SC and the serving support nodes comprise processors, timers and memory, 
which can be utilized in buffering the message and observing the life time. A! 
the changes needed for implementing the invention can instead be performed 

10 as added or updated software routines in the service centre PTM-SC and/or in 
the serving support node SGSN. The invention can thus be implemented 
relatively easily in the network elements. 

Figure 2 shows the operation of a serving support node SGSN in a 
first preferred embodiment of the invention. In the first preferred embodiment 

15 of the invention, the serving support node is assumed to be an "intelligent" 
serving support node, intelligent means that the support node itself takes care 
of the transmissions, selects the mode of transmission (a broadcast or a point- 
to-point transmission) and detects the cells which include mobile stations 
registered to the group and which mobile stations have registered to the 

20 group. 

With reference to Figure 2, one group message is received from the 
sen/ice centre by the serving support node SGSN in step 200, which message 
is stored in a transmission buffer in step 201. The group message is a 
message transmitted as a group call (PTM-G). In step 202, zero is set as the 

25 number of transmissions I (1=0). The remaining life time TTL, the waiting time 
t1 of acknowledgements and the maximum number of transmissions n are 
separated from the group message in step 203. In the following, waiting time 
of acknowledgements Is also called acknowledgement time. In the first 
preferred embodiment of the invention, the acknowledgement time is the same 

30 as the time slot between the transmissions. This provides the advantage that it 
is checked before each transmission, whether the transmission conditions will 
be fulfilled. In step 204 it is checked, whether the message still has life time 
left, i.e. whether TTL > 0. If it has, the message is transmitted in step 205 to 
the cells which include mobile stations registered to the group. In the first 

35 preferred embodiment, the message is transmitted to the mobile stations 
either as a broadcast of a cell or as a point-to-point transmission from a 
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serving support node to a mobile station depending on which alternative loads 
the networl<i less. The support node calculates the loads and decides on the 
mode of transmission in accordance with the routing zones. Usually one cell 
corresponds to one routing zone. 
5 After the transmission, the number of transmissions I is updated by 

increasing it by one in step 206. Thereafter, acknowledgements of the mobile 
stations are being monitored in the serving support node in step 207 during 
the acknowledgement time t1 . The calculation of the acknowledgement time tl 
begins at the instant of the transmission in the first preferred embodiment. If 

10 negative acknowledgements are received during this time, the missing part of 
the message is retransmitted in the first preferred embodiment. In some other 
embodiment, the missing parts of the message cannot be transmitted untii in 
connection with the next transmission, or the service centre PTM-SC decides 
on their transmission on the basis of the acknowledgement report received by 

15 it. As the acknowledgement time tl has expired, it is checked in step 208, 
whether all the mobile stations registered to the group in the area of the 
serving support node have acknowledged the message as received. This 
provides the advantage that the message is not transmitted unnecessarily, if 
everyone has already received it. Successful point-to-point transmissions are 

20 also regarded as acknowledged. If someone has not acknowledged the 
message, it is checked in step 209, whether the maximum number of 
messages has already been transmitted (l=n?). If not, it is returned to step 
204, in which it is checked whether there is still life time left. In step 205, 
different types of transmission solutions can be made at different transmission 

25 times owing to the fact that e.g. the mobile stations that have already 
acknowledged the message are "forgotten" when comparing the loading 
caused by a broadcast and that of point-to-point transmissions. 

The loop formed by steps 204 to 209 is repeated until everyone has 
acknowledged the message (step 208), the maximum number of 

30 transmissions is reached (step 209) or the life time of the message has 
expired (step 204). If one of these conditions is fulfilled already in the first 
cycle, the loop is left without repeating It once. After leaving the loop, the 
message is deleted in step 210 from the buffer of the serving support node, an 
acknowledgement report is made in step 211, which report is transmitted to 

35 the serving centre PTM-SC in step 212. In the first preferred embodiment, the 
acknowledgement report includes a list of mobile stations which have received 
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the message and informs of the quality of the used service. In some other 
embodiment, the acknowledgement report can only include one piece of this 
information, either the information on the mobile stations which have not 
acl<;nowledged the message as received or the information on the mobile 
5 stations which reported on the missing of the message. The information can 
also be represented in some other way than in the form of a list, e.g. as 
different parameters. Sufficient information may be e.g. the percentage of the 
acl<nowledged mobile stations. Making only one acknowledgement report has 
the advantage that different acknowledgements do not need to be transmitted 

10 individually. This saves the network resources. 

In an embodiment in which the message is deleted from the buffer 
as soon as the life time has expired and there still is life time left, the expiry of 
the acknowledgement time is awaited and only thereafter, the 
acknowledgement report is made. Hereby, the acknowledgement report 

15 informs of the real situation. 

It was assumed above that the waiting time t1 of the 
acknowledgements is the same as the time slot between the successive 
transmissions of the message. In some other embodiment, the waiting time t1 
of the acknowledgements can be e.g. three times as long as the time slot 

20 between the transmissions, or a support node specific constant, like delay. If 
the waiting time of the acknowledgements is a predetermined constant, of 
which the serving support node is aware, it does not have to be included in the 
message and thus separated In step 203. The same applies to the time slot 
between the transmissions to be repeated, too. If the time slot between the 

25 transmissions is not a constant and it is some other than the waiting time of 
the acknowledgements, it must be included in the scheduling information and 
separated from the message. 

In the above, the maximum number of transmissions was restricted 
to n transmissions. In some embodiments this restriction is not used, 

30 whereupon n need not be separated from the message and the checking in 
step 209 does not need to be performed. The maximum number of 
transmissions can also be a constant, of which the serving support node is 
aware. In this case, it need not be included in the scheduling information of the 
message. In some embodiments, the missing of the maximum number of 

35 transmissions from the message results in giving up the checking in step 209. 
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Unlike above, the number of mobile stations the service aims to 
reach, e.g. 90 %, can further in some embodiments be given as transmission 
Information, e.g. scheduling information, of the message. In this case, it is 
moved from step 208 to step 210, if 90 % of the mobile stations registered to 
5 the group in the area of the serving support node have acknowledged the 
message as received. 

In an embodiment, the scheduling information of the message can 
also include information on the starting time of the first transmission. In this 
case, the beginning of the starting time of the transmission is awaited before 

10 the checking in step 204. 

Figure 3 shows the operation of a service centre PTM-SC in the first 
preferred embodiment. In step 300, a group message is received in the 
service centre PTM-SC from a sen/ice requester, the message being stored in 
a buffer of the sen/ice centre PTM-SC in step 301 . Thereafter, the message is 

15 scheduled in step 302. Scheduling the message means that after the 
scheduling, the message Includes in the first preferred embodiment at least 
the following information: the remaining life time TTL, the maximum number of 
transmissions n and the time slot t1 between the transmissions. The 
scheduling information can be received from the service requester in the 

20 message. A portion of scheduling information or all scheduling information can 
be predetermined either in group specifications or in service definitions of the 
service requester. For example, the life time of a message can be determined 
to expire always at the end of the day. Part of the scheduling information can 
also be support node specific constants, in which case they are not added to 

25 the scheduling information in the service centre. In the first preferred 
embodiment, the end time of the scheduling information is used as the expiry 
time of the life time. This provides the advantage that any new scheduling 
information is not needed. In some other embodiment, the life time can also be 
given separately in cases when it is not determined in advance. 

30 After the message is scheduled, it is detected in step 303 which 

cells of the destination area include mobile stations MS registered to the 
group. In the first preferred embodiment it is enough that those serving support 
nodes SGSN are found to which an activated group routing context exists, 
letting the support nodes check the cells more accurately, in some other 

35 embodiment, the service centre PTM-SC may check the cells and their mobile 
stations. As the locations of the mobile stations registered to the group in the 
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destination area are l<nown, it is ciiecl<ed in step 304, wliether tine life time TTL 
still remains. If there is still life time left, the message is transmitted in step 305 
to the serving support nodes on whose area there are mobile stations 
registered to the group. Thereafter, acl<nowledgement reports are waited from 
5 the serving support nodes In step 306. 

After the acknowledgement report is received in step 307, the 
acknowledgement Information is updated In step 308 by the Information of the 
acknowledgement report. Thereafter, it is checked In step 309 in the first 
preferred embodiment, whether an acknowledgement has been received from 

10 all serving support nodes SGSN to which the group message was transmitted 
in step 305. If not, the process starts anew in step 306 where the 
acknowledgement reports are awaited. After the acknowledgement has been 
received from all serving support nodes SGSN, it Is checked on the basis of 
the acknowledgement information In step 310, whether all the mobile stations 

15 in the group received the message. Checking all the group members instead 
of only the members registered to the group in the destination area enables 
the delivery of the message to the mobile stations registered after the actual 
transmission. The actual transmission refers to a transmission performed by 
the serving support node. If the mobile stations belonging to the group have 

20 not received the message, it is checked In step 311, whether there is still life 
time left for the message. If there Is, the waiting time t2 is set in the first 
preferred embodiment in step 312. In the first preferred embodiment, the time 
t2 Is half of the remaining life time checked in step 31 1 , yet at least a 
predetermined minimum time, e.g. the acknowledgement time or the time t1 

25 between the transmissions (t2 = max{TTL/2, t1). This provides the advantage 
that as the remaining life time of the message Is expiring, a more intense effort 
Is made to reach the mobile stations which have not yet received the 
message, tn step 313, the aim Is to transmit the message to the mobile 
stations of the destination area which have not yet received it as a point-to- 

30 point transmission between the service centre and the mobile station. If it was 
observed in step 314 that the message could not be transmitted to everyone, 
the process changes to step 315, where the expiry of the time t2 is awaited. 
When the time t2 expires, it is returned to step 311 where it is checked, 
whether there is still life time left. 

35 The loop formed by steps 311 to 315 is repeated until either 

everyone has received the message or the life time of the message has 
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expired. Atter leaving the ioop, the process changes to step 316 in which the 
message is deleted from the buffer of the service centre. A transmission report 
is made in step 317 and transmitted to the service requester in step 318. The 
transmission report may include information on the mobile stations which 
received or did not receive the message in order to charge the mobile stations 
only for the received messages, for example. Further, the transmission report 
can according to the prior art include information on the quality of the 
transmission (QoS) and other information as well. 

In some other embodiments, it can be checked in step 310, whether 
e.g. a sufficient number of mobile stations belonging to the group or registered 
to the group in the destination area has acknowledged the message. It is also 
possible to check, which type of sen/ice the mobile station which has not 
acknowledged the message has ordered. If the mobile station has ordered e.g. 
super service, then the loop formed by steps 311 to 315 is repeated, but if it 
has ordered a normal service, an effort is no longer made to transmit the 
message from the service centre to the mobile station. 

Instead of transmitting point-to-point in step 313, the message can 
in some other embodiment be transmitted to the serving support nodes SGSN 
whose area includes the mobile stations which did not receive the message. 

instead of the loop formed by steps 311 to 315, an arrangement 
according to short message service can be implemented, where the home 
location register informs the service centre PTM-SC of the now reachable 
mobile station in the destination area. If there still remains life time for the 
message, the message is transmitted to the mobile station. This feature could 
be incorporated only to the mobile stations whose subscribers are willing to 
pay for the reception of the message a bit more. It is also possible that PTM- 
SC checks at regular intervals during the life time of the message, whether the 
mobile station has registered to the group in the destination area, and if it has, 
transmits the message to it. From step 309 the process may also change 
directly to step 316. If the service request has been transmitted both to the 
serving support nodes and to some other service centre, the report of this 
service centre is awaited in step 309 as weli. 

In a preferred embodiment of the invention, the service centre PTM- 
SC is aware of which mobile stations have registered in which routing zone 
under which support node SGSN. In this case, the life time is checked before 
transmission only in the service centre PTM-SC. The service centre informs 
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the support node SGSN of which packet has to be broadcast in which routing 
zone and which packet has to be transmitted as a PTP connection to which 
group member. Further, the service centre informs SGSN of the group 
members whose acknowledgements SGSN awaits either for a certain constant 
5 period of time or for a reported period of time. SGSN takes care of the 
transmissions and waits for the acknowledgements according to the 
instructions. After the acknowledgement time has expired, the support node 
SGSN transmits the received acknowledgements in an acknowledgement 
report to the service centre PTM-SC, which decides on the following actions 

1 0 on the basis of the acknowledgements and the remaining life time. 

The steps described above in connection with Figures 2 and 3 are 
not in absolute chronological order and some of the steps can be performed 
simultaneously or In different order than above. Between the steps, also other 
functions, which relate to transmitting different point-to-multipoint 

15 transmissions, can be performed. Some of the steps can also be left out or 
they can be performed in another network element. It is essential that the life 
time of the message is under observation, and that at some point of the 
transmission, the remaining life time is checked or it is in some other way 
arranged that the message whose life time has expired will not be transmitted. 

20 The invention does not in any way relate to how group routing connections are 
being set up, who belong and/or are allowed to belong to the group, by which 
algorithm the transmission mode of the messages is selected, or how the 
destination area and its recipients are detected. The invention is not in any 
way restricted to the transmission of complete messages only, but it can be as 

25 well applied to cases in which the message has to be split into smaller frames. 
Although the invention is described above by relating to a message to be 
transmitted as a group call which has to be acknowledged, the invention is not 
restncted only to such point-to-multipoint transmissions. It will be apparent to a 
person skilled in the art how the invention is applied to other group calls and 

30 multicasts. 

It is to be understood that the above description and the related 
figures have merely been presented to illustrate the present invention. 
Different variations and modifications of the invention will be apparent to those 
skilled in the art without departing from the scope or spirit of the invention as 
35 defined in the appended claims. 
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CLAIMS 

1 . A method for controlling a point-to-muitipoint transmission of a 
message in a mobile communication system, in which method 

the message is received (200, 300), 
5 the message is stored in a buffer of the messages to be transmitted 

(201,301). 

the message is scheduled (302), and 

the message located in the buffer is transmitted according to the 
predetermined scheduling (205, 305), 
10 characterized by 

determining a life time for the message, and 

deleting the message from the buffer (210, 316) in response to the 
expiry of the life time. 

2. A method as claimed in claim 1, characterized by 

15 checking before transmitting the message, whether there is life time 

left (204), and 

if there is, transmitting the message, 

if there is not, deleting the message from the buffer. 

3. A method as claimed in claim 2, characterized by 

20 determining an acknowledgement time for the message to be 

transmitted as a group call, 

transmitting the message to the group members (205), 
waiting for the acknowledgements of the group members during the 
acknowledgement time (207), 
25 checking after the expiry of the acknowledgement time, whether a 

predetermined part of the group members has acknowledged the message 
(208), and 

if it has, deleting the message from the buffer (210), 
if it has not, transmitting the message located in the buffer to the 
30 group members from whom an acknowledgement has not been received. 

4. A method as claimed in claim 1,2 or 3, characterized by 
receiving the message to be transmitted from another network 

element (200), 

making a report on the successful transmission of the message 
35 (21 1 ) in response to deleting the message from the buffer, and 
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transmitting the report to said another networl<; element (212). 
5. A method as claimed in claim 1, characterized by 
receiving the message to be transmitted as a group call in the first 

network element (300), 

storing the message in the buffer of the first network element (301 ), 
transmitting the message to the second network element (305), 
transmitting the message from the second network element to the 

group members (205), 

waiting for the acknowledgements of the group members in the 

second network element during the acknowledgement time (207) after the 

transmission, 

making a report on the acknowledgements in the second network 
element (211) after the expiry of the acknowledgement time, and 
transmitting the report (212) to the first network element. 

6. A method as claimed in claim 5, characterized by 
storing the message also in the buffer of the second network 

element (201), 

deleting the message also from the buffer of the second network 
element (210) in response to the expiry of the life time of the message, 

checking in the second network element after the expiry of the 
acknowledgement time, whether a predetermined part of the group members 
has acknowledged the message (208), and 

if it has, making a report (211) on the acknowledgements and 
deleting the message from the buffer of the second network element (210), 

if it has not, transmitting the message located In the bufl'er to the 
mobile stations from whom an acknowledgement has not been received. 

7. A method as claimed in claim 6, characterized by 
determining the maximum number of transmissions for the message 

in the second network element, 

calculating the number of the realized transmissions (206), 

checking before transmitting the message, whether the number of 
the realized transmissions is the same as the maximum number (209), and 

if it is, making a report on the acknowledgements and deleting the 
message from the buffer of the second network element, 

if it is not, transmitting the message located in the buffer. 
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8. A method as claimed in claim 6 or 7, characterized by 
giving a report on the acl^nowledgements, if the message has been deleted 
from the buffer of the second network element before transmitting. 

9. A method as claimed in claim 5, 6 or 7, characterized by 
5 the report including the group members who acknowledged the message as 

received. 

10. A method as claimed in claim 9, characterized by the 
first network element being arranged to transmit the message to the group 
members who did not acknowledge the group message, if these group 

10 members became reachable before the life time of the message expires. 

11. A mobile communication system comprising at least one service 
centre (PTM-SC) to transmit a message as a point-to-multipoint transmission 
and at least one network element (SGSN) via which the message is 
transmitted to cells belonging to a destination area, characterized in 

15 that 

the service centre (PTM-SC) is arranged to determine the remaining 
life time of the message and to check before transmitting the message, 
whether there is life time left and to transmit the message only if there is still 
life time left. 

20 12. A mobile communication system as claimed in claim 11, 

characterized in that the network element (SGSN) is arranged to 
determine the remaining life time of the message and to check before 
transmitting the message, whether there is life time left and to transmit the 
message only if there is still life time left. 

25 13. A mobile communication system as claimed in claim 11 or 12, 

characterized in that the network element (SGSN) is arranged to 
receive acknowledgements from the group members during a certain 
acknowledgement time and to transmit the information on the 
acknowledgements in one message to the service centre. 

30 14. A network element (SGSN, PTM-SC) of a mobile 

communication network which network supports the point-to-muitipoint 
transmission of a message, 

characterized in that the network element comprises 
means for determining the remaining life time of a message to be 

35 transmitted point-to-multipoint, and 
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means for transmitting said message according to the scheduling of 
the message, if there is still life time left. 

15. A network element as claimed in claim 14, 
characterized in that it (SGSN, PTM-SC) also comprises 

5 means for determining the acknowledgement time for the message 

to be transmitted as a multipoint group call which has to be acknowledged, 

means for monitoring the acknowledgements until the 
acknowledgement time has expired, and 

means for compiling the acknowledgements as one 
10 acknowledgement report. 

16. A network element as claimed in claim 14 or 15, 
characterized in that it (SGSN, PTM-SC) comprises means for 
transmitting the message to be transmitted as a multipoint group call which 
has to be acknowledged during the life time of the message to the group 

15 members who are reachable in the destination area of the message and who 
have not acknowledged the message as received. 

17. A network element as claimed in claim 14, 15 or 16, 
characterized in that it {SGSN, PTM-SC) comprises a processor which 
is arranged to carry out software routines and that said means are 

20 implemented as software routines. 
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(54) TiUe: METHOD AND APPARATUS FOR A DATA TRANSMISSION OF 100 MBPS IN A TERMINAL 
(57) Abstract 

A method and apparatus for a data transmission 
rate of multiples of 100 mega-bits per second (Mbps) in 
a temiinal for a wireless metropolitan area network. A 
terminal includes a first media access control unit (MAC) 
unit for receiving Fast Ethernet data packets at a rate 
of 100 Mbps for communication over a wireiess link, 
n-1 additional MAC units for receiving Fast Etbemet 
data packets at a rate of 100 Mbps for communication 
over the wireless link, a multiplexer having n inputs, 
wherein each input is coupled to receive the data packets 
from a corresponding one of the MAC units and wherein 
the output of the multiplexer provides time-division 
multiplexed data, a packet formatting apparatus coupled 
to the output of the multiplexer for formatting the time 
division multiplexed data according to radio frames, and 
a wireless transceiver coupled to the packet formatting 
apparatus for communicating the radio frames over a 
wireless link wherein the wireless link has a maximum 
bandwidth capacity of at least n times 100 Mbps, Each 
MAC unit can include a rate control unit and a rate 
buffer for temporarily storing data packets received by 
the corresponding MAC unit prior to providing them to 
a con-esponding one of the inputs of the multiplexer. 
Each MAC unit can include a corresponding layer-two 
or layer-three switch having a !00 Mbps port. The 
maximum transmission rate is limited only by the 
bandwidth of the wireless link. 
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METHOD AND APPARATUS FOR A DATA TRANSMISSION OF 100 MBPS IN A TERMINAL 

5 This is a Continuation-in-Part of Application Serial No. 08/950,028, filed October 

14, 1997, the contents of which are hereby incorporated by reference. This application 
claims the benefit of U.S. Provisional Application Serial No. 60/086,459, entitled. "Method 
and Apparatus for Wireless Communication of Fast Ethernet Data Packets," filed May 22, 
1998. 

10 

Field of the Invention: 

The invention relates to a terminal for a wireless network for a metropolitan area 
wherein the terminal achieves a transmission rate of multiples of 100 Mbps for an 
associated wireless link. More particularly, the invention relates to a wireless terminal 
15 having a number, n, of digital processing media access control units (MACs) multiplexed 
to a single radio framer so as to achieve a transmission rate of n times 100 Mbps, 

Background of the Invention: 

Computers utilized in modem office environments are typically coupled to a local 

20 area network (LAN). The LAN allow users of the computers to share common resources, 
such as a common printer included in the network, and allows the users to share 
information files, such as by including one or more file servers in the network. In 
addition, the users are typically able to communicate information with each other through 
electronic messaging. A commonly utilized type of LAN is Ethernet, Currently, a variety 

25 of products which support Ethernet are commercially available from a variety of sources. 
Other types of LANs are also utilized, such as token ring, fiber distributed data interface 
(FDDI) or asynchronous transfer mode (ATM). 

LANs are often cormected to a wide area network (WAN) via a telephone modem. 
Thus, information is communicated over the WAN via a communication link provided by a 

30 telephone service provider. These telephone links, however, are generally designed to have 
a bandwidth that is sufficient for voice communication. As such, the rate at which 
information can be communicated over these telephone links is limited. As computers and 
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computer applications become more sophisticated, however, they tend to generate and 
process increasingly large amounts of data to be communicated. For example, the 
communication of computer graphics generally requires a large amount of bandwidth 
relative to voice communicalion. Thus, the telephone link can become a data 

5 communication bottleneck. 

Business organizations and their affiliates are often spread over several sites in a 
metropolitan or geographical area. For example, a business organization can have a 
headquarters, one or more branch offices, and various other facilities. For such business 
organizations, LANs located at the various sites will generally need to communicate 

10 information with each other. Wireless communication links for connecting local area 
networks are known. For example, U.S. Patent No. 4,876.742, entitled "Apparatus and 
Method for Providing a Wireless Link Between Two Area Network Systems," and U.S. 
Patent No. 5,436,902, entitled "Ethernet Extender," each disclose a wireless communication 
link for coimecting LANs. 

15 Availability is a measure of the average number of errors which occur in digitally 

transmitted data. An availability of 99.99 percent is commonly required for radio 
communications. For an availability of 99.99 percent, the average error rate for digitally 
communicated data must be maintained below 1 x 10"'' errors per bit, 99.99 percent of the 
time. The integrity of a wireless communication link, however, is largely dependent upon 

20 transient environmental conditions, such as precipitation. Environmental precipitation 
causes a severe attenuation of the transmitted signal. For example, to maintain an 
availability of 99.99 in the presence of environmental precipitation, the signal must be 
transmitted at a level that is 24 dB/km higher than otherwise. Therefore, to ensure an 
acceptable data error rate under all expected conditions, data is typically communicated 

25 over a wireless communication link at a relatively high power and at a relatively low rate. 

The amount of data required to be communicated over the wireless link, however, can vary 
widely over time and can vary independently of environmental condhions. In addition, 
wireless links, especially those operated at high power levels, can cause interference with 
other wireless links operating in the same geographical area. Thus, the wireless link can 

30 become a data corrmiunication bottleneck. 

Therefore, a technique is needed for efficiently and cost effectively communicating 
data over a wireless link between Ethernet local area networks. 
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Summary of the Invention: 

The invention is a method and apparatus for achieving a data transmission rate of 
multiples of 100 mega-bits per second (Mbps) in a terminal for a wireless metropolitan 
area network. In accordance with an aspect of the present invention, a method of 

5 communicating data packets in a wireless network includes steps of receiving a first data 
packet wherein the first data packet is received according to a first rate of data 
communication, receiving a second data packet wherein the second data packet is received 
according to a second rate of data communication and wherein the step of receiving the 
second data packet is performed simultaneously with the step of receiving the first data 

10 packet, time division multiplexing the first data packet and the second data packet to a 
radio frame, and communicating the radio frame via a wireless link wherein the radio 
frame is communicated at a third rate of data communication wherein the third rate of data 
communication is equal to at least a sum of the first rate of data communication and the 
second rate of data communication. The method can also include a step of buffering the 

15 first data packet prior to time division multiplexing the first data packet such that the step 
of buffering the first data packet synchronizes the first data packet to the radio frame. The 
method can also include a step of buffering the second data packet prior to providing the 
second data packet to the radio framer such that the step of buffering the second data 
packet synchronizes the second data packet to the radio frame. The first and second data 

20 packets can be received from an Ethernet local area network. The first data packet can be 
a 100 mega-bit per second (Mbps) Fast Ethernet data packet. The second data packet can 
be a 10 Mbps Ethernet data packet. The method can include steps of receiving a tliird data 
packet, and time division multiplexing the third data packet to the radio frame. The 
method can include a step of encrypting the first data packet prior to performing the step 

25 of time division multiplexing. 

According to another aspect of the invention, a method of communicating data 
packets in a wireless network includes steps of receiving a first Fast Ethernet data packet 
into a first MAC unit wherein the first data packet is received at a rate of 1 00 Mbps, 
receiving a second Fast Ethernet data packet into a second MAC unit wherein the second 

30 data packet is received at a rate of 100 Mbps and wherein tlie step of receiving the second 
data packet is performed simultaneously with the step of receiving the first data packet, 
providing the first data packet and the second data packet to a radio framer according to 
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time division multiplexing thereby forming a time division multiplexed radio frame, and 
communicating the time division multiplexed radio ftame via a wireless link wherein the 
time division multiplexed radio frame is communicated at a rate of at least 200 Mbps. The 
first Fast Ethernet data packet can be received from an Ethernet local area network coupled 
5 to the first MAC unit. The method can include steps of receiving a third Fast Ethernet 

data packet into a third MAC unit wherein the third data packet is received at a rate of 100 
Mbps, and providing the third data packet to the radio framer according to time division 
multiplexing. In which case, the time division multiplexed radio frame can be 
communicated at a rate of at least 300 Mbps. The method can include a step of buffering 

10 the first data packet in the first MAC unit prior to providing the first data packet to the 
radio framer. The step of buffering the first data packet can synchronize the first data 
packet to the radio frame. The method can also include a step of buffering the second data 
packet in the second MAC unit prior to providing the second data packet to the radio 
framer such that the step of buffering the second data packet synchronizes the second data 

15 packet to the radio frame. The method can include a step of encrypting the first data 

packet prior to performing the step of providing the first data packet to the radio framer. 
The method can also include a step of receiving an Ethernet data packet into the first MAC 
unit wherein the Ethernet data packet is received at a rate of 10 Mbps. 

According to a further aspect of the present invention, a terminal for a wireless link 

20 in a metropolitan area includes a first data packet receiver for receiving data packets for 
communication over a wireless link, a second data packet receiver for receiving data 
packets for communication over the wireless link, a multiplexer having a first input, a 
second input and an output wherein the first input is coupled to receive the data packets 
from the first data packet receiver and wherein the second input is coupled to receive the 

25 data packets from the second data packet receiver and wherein the output of the 

multiplexer provides time-division multiplexed data, a packet formatting apparatus coupled 
to the output of the muhiplexer for formatting the time division multplexed data according 
to radio frames, and a wireless transceiver coupled to the packet formatting apparatus for 
communicating the radio frames over a wireless link. The first data packet receiver can be 

30 a first MAC unit. In which case, the first MAC unit can include a first rate control unit, 
and a first rate buffer, coupled to the first rate control unit, for temporarily storing data 
packets received by the first MAC unit such that the data packets are provided to the first 
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input of the multiplexer from the first rate buffers. The first MAC unit can also include a 
first data encryption apparatus coupled to the first data packet switch. The first MAC unit 
can include a first data packet switch having a 100 Mbps port wherein the first data packet 
switch is coupled to the rate control unit. The first data packet switch can be a layer-two 
5 switch or a layer-three switch. The first data packet switch can include a 10 Mbps port. 
The 100 Mbps port can receive data packets from a local area network coupled to the 
terminal. The second data packet receiver can be a second MAC unit. In which case, the 
second MAC unit can include a second data packet switch having a 100 Mbps port. The 
second data packet switch can be a layer-two switch. The second MAC unit can also 

10 include a second rate control unit coupled to the second data packet switch, and a second 
rate buffer coupled to the second rate control unh for temporarily storing data packets 
received by the second data packet switch wherein the data packets are provided to the 
second input of the multiplexer from the second rate buffers. The first MAC unit can 
include a first data encryption apparatus coupled to the first data packet switch. The 

15 second MAC unit can include a second data encryption apparatus coupled to the second 
data packet switch. 

According to yet another aspect of the present invention, a terminal for a wireless 
link in a metropolitan area includes a first MAC unit for receiving Fast Ethernet data 
packets at a rate of 100 Mbps for communication over a wireless link, n-1 additional MAC 

20 units for receiving Fast Ethernet data packets at a rate of 100 Mbps for communication 
over the wireless link, a multiplexer having n inputs, wherein each input is coupled to 
receive the data packets from a corresponding one of the first MAC unit and the n-1 
additional MAC units and wherein the output of the multiplexer provides time-division 
multiplexed data, a packet formatting apparatus coupled to the output of the multiplexer for 

25 formatting the time division multplexed data according to radio frames, and a wireless 

transceiver coupled to the packet formatting apparatus for communicating the radio frames 
over a wireless link wherein the wireless link has a maximum bandwidth capacity of at 
least n times 100 Mbps, Each of the first MAC unit and the n-1 additional MAC units can 
include a rate control unit and a rate buffer coupled to the corresponding rate control unit 

30 for temporarily storing data packets received by the corresponding MAC unit prior to 

providing them to a corresponding one of the inputs of tlie muhiplexer. The first MAC 
unit and the n-1 additional MAC units can also include an encryption apparatus coupled to 
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the rate buffer of the corresponding MAC unit for encrypting data packets received by the 
corresponding MAC unit. The first MAC unit can include a first data packet switch having 
a 100 Mbps port. The first data packet switch can be a layer-two switch or a layer-three 
switch. The first data packet switch can include a 10 Mbps port. The first MAC unit can 
5 also include a first rate control unit coupled to the first data packet switch, and a first rate 
buffer coupled to the first rate control unit for temporarily storing data packets received by 
the first data packet switch wherein the data packets are provided to the first input of the 
multiplexer fi-om the first rate buffers. Each of the n-t additional MAC units can include a 
corresponding data packet switch having a 100 Mbps port. Each of the first MAC unit and 

10 the n-1 additional MAC units can also include a rate control unit coupled to the 

corresponding data packet switch and a rate buffer coupled to the corresponding rate 
control unit for temporarily storing data packets prior to providing them to a corresponding 
one of the inputs of the multiplexer. 

An advantage of the present invention is that the maximum transmission rate is 

15 limited only by the bandwidtli of the wireless link. 

Brief Descritition of the Drawings: 

Fig. 1 illustrates a schematic block diagram of a pair of wireless terminals which 
communicate with each other via a wireless communication link in accordance with the 
20 present invention. 

Figs. 2A-F illustrate representative metropolitan area network (MAN) topologies 
according to the present invention. 

Fig. 3 illustrates a schematic block diagram of a single wireless terminal 100 in 
accordance with the present invention, 
25 Fig. 4 illustrates a schematic block diagram of the digital signal processing MAC 

and radio framer included in the CODEC illustrated in Fig. 2. 

Fig. 5 illustrates a frame structure for reformed 100BASE-T Ethernet data packets 
according to the present invention. 

Fig. 6 illustrates a radio frame according to the present invention. 
30 Fig. 7 illustrates a radio super frame according to the present invention. 

Fig. 8 illustrates a schematic block diagram of a symbol scrambler according to the 
present invention. 
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Fig. 9 illustrates a sciiematic block diagram of a differential encoder and 
characteristic equations according to the present invention. 

Fig. 10 illustrates a schematic block diagram of a differential decoder and 
characteristic equations according to the present invention. 

Fig. 1 1 illustrates a mapping constellation for a constellation mapper according to 
the present invention. 

Fig. 12 illustrates a schematic block diagram of an Ethernet-to-radio frame 
synclironizing portion of the rate control logic according to the present invention. 

Fig. 1 3 illustrates a schematic block diagram of a radio frame-to-Ethemet 
synchronizing portion of the rate control logic according to the present invention. 

Fig. 14 illustrates a schematic block diagram of a microwave module and 
microwave antenna according to the present invention. 

Fig. 15 illustrates a perspective view of the microwave antenna and a housing for 
the outdoor unit according to the present invention. 

Fig. 16 illustrates a schematic block diagram of an ahernate embodiment of the 
digital signal processing MAC and radio framer according to the present invention. 

Fig. 17 illustrates a frame structure for reformed 100BASE-T Ethernet data packets 
formed by the MAC and radio framer illustrated in Fig. 14. 

Fig. 18 illustrates a schematic block diagram of an adaptive countermeasures block 
according to the present invention. 

Fig. 19 illustrates a chart of received signal level vs. time as a result of rain fade. 

Fig. 20 illustrates a flow diagram for implementing counter-measures according to 
the present invention. 

Fig. 21 illustrates a point-to-multipoint metropolitan area network divided into 
sectors having inner and outer radii according to the present invention. 

Fig. 22 illustrates a wireless link between two terminals wherein an unauthorized 
terminal is attempting to eavesdrop on communication between the two terminals. 

Fig. 23 illustrates an embodiment according to the present invention having multiple 
digital processing MACs multiplexed to a single radio framer. 
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Detailed Description of a Preferred Embodiment: 

Fig. 1 illustrates a schematic block diagram of a pair of wireless terminals 100, 100' 
which communicate with each other via a bi-directional wireless communication link 102 
in accordance with the present invention. Though a single wireless communication link 
5 102 is illustrated, it will be apparent that a network of wireless communication links can 
interconnect a plurality of wireless terminals, thereby forming a wireless metropolitan area 
network (MAN) in accordance with the present invention. Figs. 2A-F illustrate 
representative MAN topologies which interconnect wireless nodes A-E with wireless links 
according to the present invention. Each of the nodes A-E can include a wireless terminal 

10 identical to the terminal 100 or 100' illustrated in Fig. 1 for terminating each wireless link. 
It will be apparent that other MAN topologies can be implemented and that one or more of 
the nodes A-E can be coupled to one or more other types of networks. 

Due to availability of portions of the radio spectrum in the 38 GHz frequency band, 
the wireless link 102 illustrated in Fig. 1 preferably operates within this frequency band, 

15 though another frequency band can be selected. Different channels within the selected 

band are assigned to nearby wireless links so as to reduce interference between them. The 
channels are preferably stepped at intervals of 25-50 MHz. Because the 38 GHz radio 
frequency band is susceptible to rain fade, the manner and path of transmissions via the 
wireless link 102 are adaptively modified for maintaining a predefined transmission quality 

20 in the network in accordance with the teachings of the parent application, Serial No. 

08/950,028, filed October 14, 1997, the contents of which are hereby incorporated by 
reference. 

Referring to Fig. 1, the wireless link 102 preferably includes a primary radio 
channel 102A which carries full duplex 100 mega-bits-per-second (Mbps) data traffic, 

25 including payload data, and an auxiliary radio channel 102B which carries full-duplex 

control data for network management and control over the manner of transmission over the 
link 102 (link control). For example, changes to the manner of transmission initiated 
through link control can include changing transmission power, data bit rate, amplitude 
modulation scheme, spectrum spreading and transmission path. 

30 The terminal 100 includes a broadcast device, also referred to herein as an outdoor 

unit (ODU) 104, which terminates one end of the wireless link 102. In the preferred 
embodiment, the ODU 104 includes a bi-directional radio antenna and is mounted outdoors 
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on a roof-top mast of a building. Also included in the terminal 100 is an extender device, 
also referred to herein as a top floor unit (TFU) 106, which is coupled to the ODU via bi- 
directional communication cables 108, 110 and 112 and by power leads 1 14. The TFU 
106 is preferably located indoors of the building having the ODU 104 located on its roof 
5 and as close as practical to the ODU 104. In preferred embodiment, the TFU 106 is 
located indoors, ideally in a wiring closet, on the top floor of the building. It will be 
apparent that the term "top floor unit", as used herein, refers to the extender unit 106 and 
its equivalents regardless of its location relative a building. For example, the "top floor 
unit" is preferably, though not necessarily, located on the top floor of a building. 

10 The cable 108 carries full-duplex data traffic between the ODU 104 and the TFU 

106 which is received from, or transmitted to, the primary radio channel 102A. The data 
traffic communicated via the cable 1 08 includes payload data for communication over the 
link 102 and can also include network management and control data. Preferably, data 
communicated via the cable 108 is in accordance with a Fast Ethernet standard, 802.3u, 

15 adopted by the Institute of Electrical and Electronics Engineers (IEEE), such as 100BASE- 
TX or 100BASE-T4, which operates at a data rate of 100 Mbps. The cable 110 carries 
half-duplex network management and control data between the ODU 104 and TFU 106. 
Preferably, data communicated via the cable 110 is in accordance with an Ethernet 
standard, such as lOBASE-T, which operates at 10 Mbps. The cable 1 12 carries serial data 

20 for set-up and maintenance purposes between the ODU 104 and the TFU 106. Preferably, 
the data communicated via the cable 112 is in accordance with conventional RS423 serial 
port communication protocol. The cable 114 provides supply power to the ODU 104. 

Thus, in the preferred embodiment of the present invention, data is communicated 
between the TFU 106 and the ODU 104 via each of the cables 108, 110 and 1 12 according 

25 to baseband communication frequencies. This is in contrast to systems which communicate 
data between an indoor unit and an outdoor unit by modulating such data to intermediate 
frequencies (IF). The baseband communication aspect of the present invention has an 
advantage over such an IF modulation scheme in that implementation of the TFU 106 is 
simplified by the present invention. In addition, the cables 108, 1 10 and 1 12 can be of less 

30 expensive construction than would be required for IF communication. 

A router or switch 116 is coupled to the TFU 106, and hence, to the terminal 100, 
via cables 118 and 120. The cable 118 preferably communicates data in accordance with 
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the 100BASE-TX or T4 Fast Ethernet standard, while the cable 120 preferably 
communicates data in accordance with the lOBASE-T Ethernet standard. Alternately, the 
cable 118 can be a fiber-optic cable, in which case, it preferably communicates data in 
accordance with 100BASE-FX Fast Ethernet standard. 
5 A cable 122 is coupled to a serial port of the TFU 106. Preferably, data 

communicated via the cable 122 is in accordance with the RS232 serial port 
communication protocol. A diagnostic station 124 can be coupled to the cable 122 for 
performing diagnostics, set-up, and maintenance of the terminal 100. Because certain 
aspects of the TFU 106 and ODIJ 104 can only be accessed from the diagnostic station 124 

10 security over such aspects is enhanced by the requirement that the diagnostic station 124 be 
directly connected to the TFU 106 via the cable 122. AC power is supplied to the TFU 
106 via a power supply cable 126. 

A wired local area network (LAN) 128, such as an Ethernet LAN located within the 
building having the terminal 100, can be coupled to the router or switch 116. In addhion, 

15 a wide area network (WAN) 130, such as a telephone service network which provides 

access to the world wide web, can be coupled to the LAN 128. "l^hus, the wireless link 102 
can be accessed from one or more personal computers (PCs), data terminals, workstations 
or other conventional digital devices included in the LAN 128 or WAN 130. A network 
management system (NMS) 132 is coupled to any one or more of the router or switch 116, 

20 the LAN 128 or the WAN 130. The NMS 132 accesses the wireless hnk 102 and the 
terminals 100, 100' for performing network management and link control functions (e.g. 
collecting data regarding operation of the MAN or changing the manner of data 
transmission over a particular link or Unks). If the NMS 132 is coupled to the LAN 128, 
this access is through the LAN 128. If the NMS 132 is coupled to the WAN 130, 

25 however, this access is remote via direct dial-up through a telephone service provider or via 
access through the world wide web. When network management and link control functions 
are accessed via the world wide web, a web browser is provided in the NMS 132, while a 
web server 236 (Fig. 3) is provided in the terminal 100. In the preferred embodiment, the 
DS 124 and the NMS 132 are each a personal computer, but can be another type of 

30 conventional dighal device. 

The terminal 100' terminates the opposite end of the link 102, remote from the 
terminal 100. In the preferred embodiment, the link 102 can be up to 4 kilometers or more 
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in dry climates (e.g. Wyoming) while maintaining 99.99% link availability and can be up 
to 1.2 kilometers or more in wetter climates (e.g. Florida) while maintaining 99.99% link 
availability. Elements illustrated in Fig. 1 having a one-to-one functional correspondence 
are given the same reference numeral, but are distinguished by the reference numeral being 
5 primed or not primed. Note, however, that because any NMS 132, 132' can access the 

wireless communication link 102 and both terminals 100, 100', an NMS 132 or 132' need 
not be located at each end of the link 102. 

Fig. 3 illustrates a schematic block diagram of a single wireless terminal 100, 
including a TFU 106 and an ODU 104, in accordance with the present invention. The 

10 TFU 106 includes a 100BASE-T regenerator 200 which is coupled to the cable 118 (Fig. 

1) and to the cable 108 (Fig. 1). In addition, assuming the cable 118 is a fiber-optic cable, 
the TFU 106 includes a converter 202 for converting between fiber-optic cable and 
Category 5 twisted pair cable. The converter 202 is coupled to the fiber-optic cable 118 
and to the regenerator 200. The TFU 106 also includes a lOBASE-T repeater 204 coupled 

15 to the cable 120 (Fig. 1) and to the cable 110 (Fig. 1). A converter 206 included in the 
TFU 106 converts between signals in accordance with the RS232 standai'd and signals in 
accordance with the RS423 standard. The converter 206 is coupled to the cable 122 (Fig, 
1) and to the cable 112 (Fig. 1). 

The TFU 106 also includes an alternating-current to direct-current (AC/DC) power 

20 converter 208 coupled to the cable 126 (Fig. 1) and to the cable 114 (Fig. 2). The power 
converter 208 provides power to the TFU 106 and to the ODU 104. A status indicator 210 
included in the TFU 106 displays status of the TFU 106 via light emitting diodes for 
diagnostic, set-up and maintenance purposes. 

The TFU 106 provides three interfaces to customer equipment, including the router 

25 or switch 116 (Fig. 1) and the DS 124 (Fig. 1). These include a full-duplex 100 Mbps 

interface via the regenerator 200, a half-duplex 10 Mbps interface via the repeater 204 and 
an RS232 serial port via the converter 206. Though the payload data traffic is generally 
directed through the 100 Mbps interface while network management and link control traffic 
is generally directed through the 10 Mbps interface, a user of the terminal 100 can combine 

30 network management and link control signals with the payload data traffic in the 100 Mbps 
interface depending upon the particular capabilities of the router or switch 116 (Fig. 1). 
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The TFU 106 provides an interface from multiple indoor cables 118, 120, 122, 126, 
lo multiple outdoor cables 108, 110, 11 2 and 114. TFU 106 also regenerates/repeats the 
Ethernet signals in the form of Ethernet data packets, between the cables 108, 118 and 
between the cables 110, 120. Thus, the TFU 104 serves to extend the maximum distance 
5 possible between the customer equipment, such as the router or switch 1 16 (Fig. 1), and 
the ODU 104. In the preferred embodiment, a distance between the customer equipment 
and the TFU 106 can be up to 100 meters while a distance between the TFU 106 and the 
ODU 104 can also be up to 100 meters. Accordingly, in the preferred embodiment, a 
distance between the customer equipment and the ODU 104 can be up to 200 meters. 
10 Because data is communicated between the TFU 106 and ODU 104 at baseband 

frequencies, however, apparatus for performing IF modulation is not required in the TFU 
106. 

The ODU 104 includes a 100BASE-T transceiver 212 coupled to the cable 108, a 
lOBASE-T transceiver 214 coupled to the cable 110, an RS423 driver 216 coupled to the 

15 cable 112 and a DC-to-DC power converter 218 coupled to the cable 1 14. The lOOBASE- 
T transceiver 212, the lOBASE-T transceiver 214, and the RS423 driver 216 are each 
coupled to a coder/decoder (CODEC) 220 included in the ODU 104. The power converter 
218 provides power to the ODU 104. 

The CODEC 220 includes a media access control unit (MAC) 222, having a 

20 transmitting portion 224 and a receiving portion 226, a radio framer 228 and a micro- 
processor 230 for controlling operation of the ODU 104. The transmitting portion 224 and 
the receiving portion 226 of the MAC 222 are coupled to the 100BASE-T transceiver 212 
for communicating Ethernet data packets with the 100BASE-T transceiver 212. The radio 
framer 228 is coupled to the MAC 222 for translating data from the Ethernet data packets 

25 received by the MAC 222 into a radio frames 350 (Fig. 6) suitable for radio frequency 
modulation and transmission. The radio framer 228 also translates received radio frames 
350 (Fig. 6) into packets which it provides to the MAC 222. 

The micro-processor 230 is programmed by software so as to implement a TCP/IP 
stack 232, a link management (LM) task 234, a HyperText Transfer Protocol (HTTP) 

30 server 236 and a simple network management protocol (SNMP) agent 238. The micro- 
processor 230 manages each wireless link of a network of such wireless links (e.g., a 
MAN), including a local link 102 (Fig, 1) which is coupled directly to the terminal 100. 
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The micro-processor 230 is accessible via any of tlie NMS 132 (Fig. 1) and via tlie DS 124 
(Fig. 1). Thus, the wireless networlc of links can be managed locally, such as via an NMS 
132 or DS 124 which is vrired to the TFU 106. For this purpose, the microprocessor 230 
is assigned an Ethernet (medium access control) MAC address. Alternately, the wireless 
5 network of links can be managed remotely, such as via an NMS 132 which is coupled to 
the WAN (Fig. 1) and which accesses the micro-processor 230 through internet access 
using TCP/IP (Internet Protocol). The TCP/IP stack 232 provides for this TCP/IP interface 
through the world wide web. For this purpose, the microprocessor 230 is assigned an 
internet protocol (IP) address. 

10 The LM task 234 provides a function of changing the manner in which data is 

transmitted over a wireless link, initiated by one of the NMS 132, 132'. For example, the 
data rate for the link 102 can be changed via the LM task 132 included in the ODU 104. 
This can include sending a link control command over the link 102 to the ODU 104' (Fig. 
1) so that both terminals 100, 100' communicate data at the same rate. Such commands 

15 are received from, and provided to, the microprocessor 230 by a overhead hnk 

management (OH/LM) module 240 included in the radio framer 228. Thus, the radio 
framer 228 appropriately combines network management and link control hraffic provided 
by the LM task 234 with payload data received from the MAC 222 into radio frames 350 
(Fig. 6) for communication over the link 102. In addition, the radio framer 228 extracts 

20 network management and link control traffic from radio frames 350 (Fig. 6) received from 
the link 102 and provides them to the LM task 234 of the microprocessor 230 via the 
OH/LM module 240. While two types of data traffic (payload and link control) are 
communicated via radio frames 350 (Fig. 6), the payload data is considered to be 
communicated via the primary channel 102A, while the link control traffic considered to be 

25 communicated via the auxiliary channel 102B. Accordingly, these two channels 102 A and 
102B are time-division multiplexed. 

A graphical user interface by which the micro-processor 230 can be accessed from 
an NMS 132, 132' (Fig. 1) or DS 124, 124' (Fig. 1) for network management and link 
control purposes, is preferably achieved by the HTTP web server software module 236 

30 which is implemented by the microprocessor 230 located in the ODU 104 and which is 
assigned a unique IP address. The server software 236 operates in conjunction with the 
TCP/IP stack 232. According to this aspect of the invention, the server software 236 is 
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Utilized for providing a graphical user interface for through which network management 
functions are initiated. These functions include retrieving data representative of network 
conditions in the MAN and changing the manner in which data is transmitted across a 
wireless link of the MAN. 

5 Thus, functions for managing the MAN and its wireless links can be accessed and 

initiated from network management stations 132, 132' (NMS) located in various portions of 
the MAN, utilizing web browser software resident in the NMS 132, 132'. This graphical 
user interface provides a user friendly environment which can operate on, and be accessed 
by, a variety of different NMS's obtained from a variety of different manufacturers. For 

10 example, an NMS 132, 132' can be a workstation manufactured by Sun Microsystems, a 
PC manufactured by any one of a variety manufacturers or even a set-top box used in 
conjunction vAth a television set. Compatibility with the web server is achieved via 
commercially available web browser software resident in the NMS 132, 132'. This aspect 
of the present invention addresses compatibility issues between the NMS 132, 132', and the 

15 terminal 100, 100'. 

The SNMP agent 238 located in the ODU 104 maintains a management 
information database (MIB statistics) which is a collection of managed objects that 
correspond to resources of the MAN and of the terminal 100. The SNMP agent 238 can 
access the MIB to control certain aspects of the MAN and the terminal 100 and can query 

20 the MIB for information relating to the managed objects. The SNMP is accessible through 
the HTTP server 236. 

The ODU 104 also includes a transmit modulator {TX mod) 242, a receive 
demodulator (RX demod) 244 and a microwave module (MWM) 246. The transmit 
modulator 242 translates from digital baseband output data received from the radio framer 

25 228 to analog waveforms suitable for up-conversion to microwave frequencies and eventual 
transmission over the wireless link 102. The analog waveforms formed by the transmit 
modulator 242 preferably modulate a 490 MHz IF carrier. It will be apparent, however, 
that a frequency other than 490 MHz can be selected for this purpose. 

The receive demodulator 244 performs functions which are essentially the opposite 

30 of those performed by the transmit modulator 242. In the preferred embodiment, the 

receive demodulator 244 receives a 150 MHz IF signal from the microwave module 246. 
It will be apparent, however, that a frequency other than 150 MHz can be selected for this 
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purpose. The receive demodulator 244 controls the level of the this signal via automatic 
gain control (AGC) and, then, down-converts the signal to baseband according to coherent 
carrier recovery techniques and provides this dovm-converted signal to the radio framer 
228. 

5 The microwave module 246 performs up- conversion to microwave frequency on the 

490 MHz IF output signal generated by the transmit modulator 242 and provides this up- 
converted signal to a microwave antenna 508 (Fig. 12) which transmits the data over the 
link 102. In addition, the microwave module 246 receives a microwave frequency signal 
from the link 102, down-converts this signal to a 150 MHz IF signal and, then, provides 

10 this down-converted signal to the receive demodulator 244. 

Fig. 4 illustrates a schematic block diagram of the digital signal processing MAC 
222 and radio framer 228 included in the CODEC 220 illustrated in Fig. 2. The MAC 222 
includes rate control logic 250 and rate buffers 252. The rate control logic 250 receives 
100BASE-T Ethernet data packets at 100 Mbps from the 100BASE-T transceiver 212 (Fig. 

15 3) via a media independent interface (Mil) between the MAC 222 and the transceiver 212. 

Note that 100BASE-T Ethernet data packets are provided to the transceiver 212 
(Fig. 3) as a serial data stream. In accordance with the IEEE 802.3u standard, the serial 
data stream is encoded utilizing a 4B/5B scheme. According to the 4B/5B scheme, each 
four-bit portion (nibble) of each 100BASE-T data packet is accompanied by a 1-bit data 

20 vahd field. Thus, due to the data valid bits, the wire speed for 100BASE-T is actually 125 
Mbps, though the serial data communication rate is 100 Mbps assuming the data valid bits 
are discounted. The transceiver 212 converts this serial data stream into parallel four-bit 
portions of data (nibbles), a data valid signal (RX_DV) and also recovers a clock signal 
from the data stream. The nibbles, data valid signal and clock signal are provided to the 

25 MAC 222 by tlie transceiver via the Mil interface. 

The data nibbles, data valid signal and recovered clock signal are then synchronized 
to a locally generated clock signal. This locally generated clock signal preferably operates 
at 27.5 Mhz and is derived from a 55 MHz and 10 parts-per-million accuracy crystal 
oscillator located within the CODEC 220 (Fig. 3). The rate control logic 250 detects each 

30 100BASE-T Ethernet data packet received from the transceiver 212. In the preferred 

embodiment, the rate control block 250 then checks each such 100BASE-T Ethernet data 
packet for errors utilizing the frame check sequence (FCS) appended to each 100BASE-T 



- 15 - 



wo 99/62231 PCT/US99/1 1 137 

Ethernet packet and strips each 100BASE-T Ethernet data packet of its preamble and start- 
of-frame delimiter (the frame-check sequence FCS for each 100BASE-T Ethernet packet is 
preferably retained). The rate control logic 250 also converts each Ethernet data packet 
from nibbles to bytes. 

5 The rate control logic 250 calculates the length of each detected 100BASE-T 

Ethernet data packet. The rate control logic 250 also determines whether the packet is too 
long, too short (a runt packet) or is misaligned. 

The rate control logic 250 then temporarily stores the packets in rate buffers 252. 
In the preferred embodiment, the bytes for each packet are clocked into the rate buffers 

10 252 according a clock signal recovered from the data. The rate buffers 252 preferably 
include two first-in, first-out (FIFO) buffers having 16K entries, one for packets being 
transmitted and one for packets being received. The FIFO buffers each preferably provides 
sufficient storage for each entry so that additional information can be stored in the rate 
buffers 252 along with the byte of data. Such additional information preferably includes 

15 the data valid bit for each nibble and an indication of whether the nibble is payload data or 
overhead for the 100BASE-T Ethernet packets. For example^ the overhead can include 
inter-packet gaps codes (e.g. one byte/octet of all zeros with associated data valid bits de- 
asserted), and start-of-packet codes. Asstiming inter-packet gap codes are stored, preferably 
only one inter-packet gap code, representative of the minimum required inter-packet gap 

20 (e.g. of 0.96 \is), is stored in the rate buffers 252. 

The rate control logic 250 then records the previously determined length of the 
100BASE-T Ethernet data packet in a length and status FIFO buffer 254. In addition, the 
rate control logic 250 stores an indication of the status of the packet (e.g. too long, too 
short or misaligned) in the length and status buffer 254, 

25 The radio framer 228 is coupled to the MAC 222 and includes the OH/LM block 

240 (Fig. 3), a packet synch/de-synch block 254, a Reed-Solomon encoder/decoder (R-S 
codec) 258, a framing block 260, a pseudo-random number (PN) randomizer/de-randomizer 
block 262, a differential encoder/decoder 264 and a constellation mapper 266. 

The packet synchyde-synch block 256 retrieves the stored 100BASE-T Ethernet data 

30 packets from the rate buffers 252 at an appropriate rate which depends, in part, upon the 

data transmission rate utilized for sending data over the wireless link 102. In the preferred 
embodiment, removal of data from the rate buffers 252 for an Ethernet packet is not 
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initiated until the packet has been completely stored. During periods when a complete 
packet is not available from the rate buffers 252, then an inter-packet gap code is 
substituted by the packet synch/de-synch block 254. 

In the preferred embodiment of the present invention, the packet synch/de-synch 
5 block 256 reforms the 100BASE-T Ethernet data packets according to a reformed frame 
structure 300 for 100BASE-T Ethernet data packets illustrated in Fig. 5. The reformed 
frame structure 300 includes a synch pattern field 302, a length field 304, a data field 306 
and a frame check sequence (PCS) field 308, 

Recall that the rate control logic 250 (Fig. 4) strips each 100BASE-T Ethernet data 

10 packet of its preamble and start-of-frame delimiter prior to storing the packet in the rate 

buffers 252. Upon retrieving each packet from the rate buffers, the packet synch/de-synch 
block 256 adds a synch pattern in field 302 and a length value in field 304 to the packet. 
The length value is retrieved from the length and status buffer 254. 

In the preferred embodiment, finite state machines control the synch/de-synch block 

15 256 so as to enable the retrieval of 100BASE-T Ethernet packets from the rate buffers 252 
along with the length and status of each, at a appropriate frequency for forming radio 
frames 350 (Fig. 6). A store and forward technique is applied to 100BASE-T Ethernet 
packets which pass through the transmit portion of the rate buffers 252. Thus, data packets 
to be transmitted across the wireless link 102 are completely received into the rate buffers 

20 252 and stored therein prior to being formed into a radio frame 350. A cut-through 

technique, however, is preferably apphed to 100BASE-T data packets which pass through 
the receive portion of the rate buffers 252. Thus, data packets received from the wireless 
link 102 are forwarded to the transceiver 212 (Fig. 3) as they received without storing the 
entire data packet in the rate buffers 252. 

25 Table 1 shows the particular bit values for the synch pattern field 302 and for the 

length value field 304 according to the preferred embodiment of the present invention. 
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Table 1 



Synch Field 302 


Packet Length Field 304 




octet 1 


octet 2 


octet 3 


octet 4 


octet 5 


octet 1 


octet 2 


octet 3 


Bit 


1 


1 


0 


1 


0 


G[ll] 


G[7] 


G[3] 


7 


1 


1 


0 


1 


0 


G[10] 


G[6] 


G[2] 


6 


0 


0 


1 


0 


1 


G[9] 


G[5] 


G[l] 


5 


1 


1 


0 


1 


0 


G[8] 


G[4] 


G[0] 


4 


0 


0 


! 


0 


1 


0 


L[7] 


L[3] 


3 


1 


1 


0 


1 


0 


L[10] 


L[6] 


L[2] 


2 


1 


1 


0 


1 


0 


L[9] 


L[5] 


L[l] 


1 


0 


0 


] 


0 


1 


L[8] 


L[4] 


L[0] 


0 



As shown in Table 1, the synch pattern placed in the synch field 302 is preferably a 
five-octet (five-byte) pattern defined by a five-bit Willai'd code [11010], Essentially, the 

15 Willard code is repeated for each octet, but is inverted for two of the five octets. The 

length value placed in the length field 304 is preferably an eleven-bit value L[10:0] which 
specifies the number of octets (bytes) of payload data contained in the data field 306. 
Thus, the length value L[10:0] can vary for each packet depending upon the length of the 
data payload included in the 100BASE-T Ethernet packet. In the preferred embodiment, a 

20 twelve-bit Golay check sum G[l 1 :0] for the length value is stored along with the length 
value in the length field 304, as shown in Table 1, Because the length field 304 is 
preferably three octets (three bytes) a value of zero (0) is used a place holder between the 
length value L[10:0] and the Golay check sum G[n:0]. 

Referring to Fig. 5, the data payload from the Ethernet packet is stored in the data 

25 field 306. Note that 100BASE-T Ethernet data packets are conventionally of variable 
length. In particular, the data payload portion for a conventional 100BASE-T Ethernet 
packet can vary between 64 and 1518 octets (bytes). Thus, the length of the data field 304 
can vary between 64 and 1518 bytes. 

An important aspect of the reformation of the Ethernet data packets in the reformed 

30 frame structure 300 is the omission of the 1-bit data valid field for each nibble of the 

Ethernet packet. Rather, the nibbles are placed contiguously in the data field 306. This 
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omission of the data valid bits results in a significant savings in bandwidtli required for 
transmitting the reformed packet frame 300 over the wireless link 102 in comparison to 
also transmitting the data valid bits over the wireless link 102. The FCS sequence is 
retained for each Ethernet packet and placed in the FCS field 308. 
5 The packet synch/de -synch block 256 also receives link control data from the 

OH/LM 240 and for combining this link control data with the reformed packet frames 300 
to be communicated over the hnk 1 02. 

The R-S codec 258 receives the reformed data packet frames 300 and link control 
commands from the packet synch/de-synch block 256 and performs Reed-Solomon (R-S) 

10 forward error correction coding. The R-S encoded data is then provided to the framing 

block 260 where the R-S encoded data is formatted according to radio frames 350 (Fig. 6). 

Fig. 6 illustrates a radio frame 350 according to the present invention. The radio 
frame 350 includes a synch field 352 for synchronizing a receiver to the radio frame 350, 
an auxiliary field 354 for network management and link control traffic which is received 

15 from the OH/LM 240 to be communicated over the auxiliary channel 102B of the wireless 
link 102, a data field 356, and an R-S parity field 358. The value placed in the synch field 
is preferably 47 hex. 

In the preferred embodiment, radio frames 350 are continuously formed and 
transmitted across the wireless link 102 whether or not data from a complete Ethernet 

20 packet is queued in the rate buffers 252 (Fig. 4) to be placed in reformed packet frames 
400. During periods when no reformed packet frames are available, the data field 356 of 
the current radio frame 350 is loaded with idle code (all zeros). Similarly, during periods 
when no network management commands are queued to be communicated via the auxiliary 
channel 102B, then the auxiliary field 354 is loaded with idle code (all zeros). 

25 Recall that reformed packet frames 300 have variable length according to the 

preferred embodiment of the present invention. The data field 356 of each radio frame 
350, however, preferably has a fixed length according to the preferred embodiment of the 
present invention. Accordingly, the R-S encoded data from the R-S codec 258 is placed 
contiguously in the data field 356 of each radio frame 350 such that reformed data frame 

30 300 boundaries do not have a predefined relationship to radio frame 350 boundaries. For 
example, a reformed data frame 300 can span multiple radio frames 350. Alternately, up 
to three complete smaller reformed data frames 300 can be included in a single radio frame 
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350. Further, during idle periods between communication of reformed packets, an idle 
code is preferably transmitted as a place holder within the data field 356 of each radio 
frame 350 to meet the timing requirements needed to synchronize 100BASE-T Ethernet 
data packets. 

5 As radio frames 350 are formed, multiples of the radio frames 350 are combined to 

form a radio "super frame" 380 (Fig. 7). Fig. 7 illustrates a radio super frame 380 
according to the present invention. In the preferred embodiment, each radio super frame 
380 includes 16 consecutive radio frames 350 (Fig. 6). For the first radio frame 382 of the 
super frame 380, the value placed in the synch field 352 is inverted (changed to B8 hex). 

10 In the second through sixteenth radio frames 384, however, the value placed in the synch 
field 352 remains unchanged. The value placed in the synch field 352 of the first radio 
frame 386 for a next radio super frame 388, is also inverted. This inversion of the synch 
value for the first radio frame 350 of each radio super frame 380 allows the radio super 
frames 500 to be detected after reception. 

15 The radio super frame 380 is provided to the PN randomizer/de-randomizer 262. 

The PN randomizer/de-randomizer 262 performs quadrature amplitude modulation (QAM) 
scrambling on the entire radio super frame 380 except for the inverted synch values placed 
in the first synch field 352 of each super frame 380. By disabling the PN randomizer/ de- 
randomizer 262 for the inverted synch values, the scrambled super frame 380 can be 

20 detected upon reception. In preferred embodiment, the scrambling operation maps each 
octet (byte) of the radio super frame 380 (other than the inverted synch values) to a two 
successive four-bit symbols utilizing a 13th order polynomial, as shown by the schematic 
block diagram of the PN randomizer/de-randomizer 262 according to the preferred 
embodiment of the present invention. 
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Referring to Fig. 8, each octet of the radio super frame 380 (other than the inverted 
synch values) is divided into two successive four-bit portions B[3:0] which are applied to 
the correspondingly labelled inputs illustrated in Fig. 8. These inputs correspond to in- 
phase and quadrature (I&Q) symbol components II, 10, Ql, QO. A feedback shift register 
400 generates the specified 13th order polynomial. Contents of selected memory cells of 
the feedback shift register 400 are exclusive-OR'd by logical exclusive-OR blocks 402, 
404, 406, and 408 with each four bit portion b[3:0] of the radio frame. Outputs of the exclusive- 
OR blocks 402, 404, 406 and 408 form I&Q symbol components 11', 10', Ql', QO'. 

The symbol components IT, 10', Ql', QO', are applied to the differential 
encoder/decoder block 264 (Fig. 4). Fig. 9 illustrates a schematic block diagram of a 
differential encoder 264A included in the differential encoder/decoder block 264 (Fig. 4) 
and characteristic equations according to the present invention. The encoder 264A forms 
signal components 11", 10", Ql", QO". In the preferred embodiment, the encoder 264A 
is implemented by an appropriately preconditioned look-up table. 

The differential encoder encodes the scrambled symbols from the FN randomizer/ 
de-randomizer 262 such that quantum-phase differencing of the transmitted symbols 
according to modulo-7t/2 recovers the original un-encoded data, independent of which of 
the four possible quantum-phase alignments is selected in the decoder 264B illustrated in 
Fig. 10. 

Fig. 10 illustrates a schematic block diagram of the differential decoder 264B 
included in the differential encoder/decoder 264 (Fig. 4) and characteristic equations 
according to the present invention. In the preferred embodiment, the differential decoder 
264B is implemented by an appropriately preconditioned look-up table. 

The symbol components 11", 10", Ql", QO',' formed by the encoder 264A are 
applied to the constellation mapper 266 (Fig. 4). The constellation mapper 266 maps four- 
bit portions of the radio frame 350 to sixteen different symbols, as shown in Fig. 11, 
according to quadrature amplitude modulation techniques (16 QAM). 
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Fig. 1 1 illustrates a mapping constellation for the constellation mapper 266 {Fig, 4) 
according to the present invention. In the preferred embodiment, this constellation is 
defined by a standard adopted by the Digital Audio Visual Counsel (DAVIC). The input 
symbol components 11", 10", Ql", QO", are mapped to the output symbol components Is, 
5 Im, Qs, Qm, as shown in Table 2. The mapped symbols are then provided by the 
constellation mapper 266 (Fig. 4) to the transmit modulator 242 (Fig. 3). 

Table 2 



10 



15 



25 



11", IO",Qr',QO" 
(input) 


Is, Im, Qs, Qm 
(output) 


0000 


1010 


0001 


1110 


0010 


1001 


001 1 


1000 


0100 


1011 


0101 


nil 


0110 


1101 


0111 


1100 


1000 


Olio 


1001 


0111 


1010 


0101 


1011 


0001 


1100 


0010 


1101 


0011 


1110 


0100 


nil 


0000 
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Received radio super frames 380 (Fig. 7) are provided to the constellation mapper 
266 (Fig. 4) from the receive de-modulator 244 (Fig. 3). During radio super frame 380 
reception, each radio super frame 380 is converted back from the symbols Is, Im, Qs, Qm, 
into the symbol components 11", TO", Ql", QO", by the constellation mapper 262 
5 performing a reverse of the mapping operation according to the relationships shown in 
Table 2. 

In the preferred embodiment of the present invention, the QAM format can be 
altered dynamically under control of the microprocessor 230 based upon rain fade or 
interference detected through bit error rates (BER) or upon receiving a link control 

10 command. For example the QAM format can be dynamically altered from 16 QAM to 4 
QAM. Alternately, the QAM format can be changed from 16 QAM to 4 QAM and with 
the application pf spectrum spreading. As a result, the data transmission bit rate falls, 
however, the error rate would be expected to fall also. Conversely, the QAM format can 
be dynamically ahered from 16 QAM to 64 QAM which results in a higher data 

15 transmission bit rate. 

Then, the differential decoder 264B (Fig. 10) decodes the symbol components 11", 
10", Ql", QO", into the symbol components 11', 10', QF, QO'. Next, the radio super 
frame 380 is detected by the inverted synch values for the first radio frame of each super 
frame 380. The symbol components IT, 10', Ql', QO', are then provided to the PN 

20 randomizer/de-randomizer 262 (Fig, 4) which converts them to the back into the original 
two successive four-bit portions b[3:0] for each octet of each radio frame 350 (Fig. 6) of 
the radio super frame 380 (Fig. 7). 

The radio frame 350 is then synchronized to the radio super frame 380 by detecting 
the non-inverted synch value in the field 352 (Fig. 6) for each radio frame 350. Forward 

25 error correction is performed by the R-S codec 258 (Fig. 4), For each radio frame 350 

having an error which is uncorrectable by the R-S codec 258, the R-S codec 258 provides 
an indication, preferably by setting a flag, which is stored in the rate buffers 252 along 
with the affected packet data. For each Ethernet packet formed by the rate control logic 
250 which is affected by such an uncorrected error as flagged by the R-S codec 258 (Fig. 

30 4), the transmit error signal TX_ER provided to the transceiver 212 (Fig. 3) via the Mil 
interface, is asserted. A link-layer response can then be applied to cause the packet to be 
resent. 
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The reformed data frames 300 are then passed from the R-S codec to the packet 
synch/de-synch block 256. In the packet synch/de-synch block 256, the reformed data 
frames 300 (Fig. 5), as well as network management and control data, are detected and 
extracted from the radio frame 350 structure. For the reformed data frames 300, this is 
accomplished by a windowed search technique which utilizes matched filter correlation. 
The search technique is utilized to locate the five-octet synch value in the synch field 302 
(based on the Willard code) for each reformed data frame 300. When packet 
synchronization is maintained, the search window preferably encompasses only inter-packet 
gap periods (when the data field 356 of the radio frame 350 contains the idle code). 
During periods when packet synchronization is not detected, however, the search window is 
expanded to encompass the entire packet. Once synchronization is obtained, the window is 
again reduced. 

Correlation searching is performed by the packet synch/de- synch block 256 utilizing 
a matched filter which performs correlation on an octet-by-octet basis. Accumulation by 
addition is performed on 40 bits of data at a time (5 bytes), as octets slide through the 
matched filter. The accumulated value is compared to a predetermined threshold for each 
octet. When the tlireshold is exceeded, the start of a reformed data frame 300 is indicated. 

Once a synch value is detected, the length value for the packet and Golay code arc 
read from the length field 304. The length value is verified utilizing the Golay code. If 
necessary, the length value is corrected utilizing the Golay code. If the length value is 
corrupted and uncorrectable, however, the packet is disregarded while searching for a next 
synch value continues. 

Assuming the length value is correct or correctable, the reformed data ftame 300 is 
loaded to the rate buffers 252 by the packet synch/de-synch block 256 in eight-bit portions 
(bytes) for processing into a 100BASE-T Ethernet packet. From the length value, the data 
valid bit for each byte is also re-generated and stored in the rate buffers 252. A single 
inter-packet gap code is stored in the rate buffers 252 to separate each packet. Network 
management and link control data from the auxiliary field 354 of each received radio frame 
350 is provided to the microprocessor 230 (Fig. 3) through time-division de-multiplexing. 

Then, searching for a next synch value is disabled until the end of the reformed 
data frame 300, as indicated by the correct or corrected length value. 
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Reformed data frames 300 are retrieved from the packet buffer 252 under control of 
the rate control logic 250 and returned to conventional 100BASE-T Ethernet format for the 
Mil interface with the transceiver 212 (Fig. 3), This is accomplished by restoring the 
preamble and start-of-frame delimiter for each 100BASE-T Ethernet packet. Then, the 
5 conventional 100BASE-T Ethernet packets are provided to the 100BASE-T transceiver 212 
(Fig. 3) at a rate appropriate to the 100BASE-T transceiver 212. The 100BASE-T 
transceiver 212 then communicates the packets to the TFU (Figs. 1 and 3). In the 
preferred embodiment, the rate control logic 250 includes a finite state machine for 
performing the function of retrieving the Ethernet packets from the rate buffers 252 and 

10 providing them to the 100BASE-T transceiver 212. Thus, the rate control logic 250 

synchronizes the packets to a clock signal utilized for communication of the 100BASE-T 
data packets with the locally generated clock signal which is utilized for forming and 
communicating radio frames 350 (Fig. 6). 

Referring to Figs. 3 and 4, in the preferred embodiment, the transmit modulator 242 

15 receives four-bit symbols from the constellation mapper 266 of the radio framer 228 in the 
CODEC 220 at 27.5 Mbaud. Each symbol is converted to a complex in-phase and 
quadrature (I&Q) voltage and, then, pulse- shaped utilizing a square-root cosine filter in the 
transmit modulator 242. Finally, the symbol modulates a 490 MHz intermediate frequency 
(IF) output signal. The output level of the signal formed by the transmit modulator 242 is 

20 selectively adjustable over a continuous range under control of the micro-processor 230. 
Adjustments in the output level are preferably made in response to detected rain fade, 
detected interference or in response to a link control command. The modulated IF signal 
formed by the transmit modulator 242 is supplied to the microwave module 246. 

The receive demodulator 244 preferably includes a O-dB/20-dB IF attenuator in the 

25 receive path which is selectable under control of the micro-processor 230 depending upon 
the range of the hiik 102. Typically, this attenuator is set for 0-dB. For link ranges of less 
than approximately 50 meters, however, the attenuator is preferably set for 20-dB 
attenuation. The receive demodulator 244 performs adaptive slope equalization to 
minimize effects of distortion caused by transmission over the link 102. Further, the 

30 receive demodulator 244 preferably also includes an adaptive time-domain equalizer to 

perform symbol synchronization, and a matched-filter square-root-raised-cosine process is 
applied to minimize inter-symbol interference. 
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Fig. 12 illustrates a schematic block diagram of an Ethernet-to- radio frame 
synchronizing portion 26S of the rate control logic 250 (Fig. 4) and transmit buffer 252A 
according to the present invention. The transmit buffer 252A forms a portion of the rate 
buffers 252 (Fig. 4). 100BASE-T Fast Ethernet packets and a receive data valid signal 
5 RXDV are received into the transmit buffer 252A from the transceiver 212, as explained 
above in reference to Fig. 4, In addition, a clock signal at 25 MHz is derived from the 
incoming data packet and utilized for clocking the incoming Ethernet data packets into the 
transmit buffer 252A. 

The receive data valid signal RXDV is provided to a first input of an arbitration 

10 logic block 270. In response to a complete Ethernet packet being stored in the transmit 

buffer 252A, as indicated by the data valid signal RXDV, the arbitration logic 270 instructs 
a packet counter 272 to increment a count by one. As Ethernet packets are retrieved from 
the transmit buffer 252A, a delayed data valid signal is also retrieved from the transmit 
buffer 252A. This delayed data valid signal is applied to a second input to the arbitration 

15 logic block 270. In response to a complete Ethernet data packet being removed from the 
transmit buffers 252A as it is supplied to the synch/de- synch logic block 256, as indicated 
by the delayed data valid signal, the arbitration logic block 282 instructs the packet counter 
272 to decrement the count by one. Thus, the packet counter 272 maintains a current 
count of complete Ethernet data packets in the transmit buffer 252A. 

20 This count is provided by the packet counter 272 to a threshold compare block 274. 

The threshold compare block 274 notifies a read packet state machine 276 when a 
sufficient number of complete Ethernet packets are stored in the transmit buffer 252A to 
initiate retrieval of the packets from the transmit buffer 252A. In the preferred 
embodiment, only one complete Ethernet packet need be stored in the transmit buffer 25 2 A 

25 to initiate the read packet state machine 276 to retrieve the packet. Once initiated to 

retrieve a packet, the read state machine 276 activates a first input to a logic AND gate 
278, A second input to the logic AND gate 278 receives a read frame enable signal from 
the synch/de-synch logic 256 (Fig, 4). This read frame enable signal is activated when the 
synch/de-synch logic 256 is ready to receive the Ethernet packet data for insertion into a 

30 radio frame 350 (Fig. 6), 

An output of the logic AND gate 278 is coupled to a read input of the transmit 
buffer 252A for retrieving the packet from the transmit buffer 252A. As it is being 
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retrieved, the packet is provided to the synch/de-synch logic 256. 

An important aspect of the Ethernet-to-radio frame synchronizing portion 268 of the 
rate control logic 250 (Fig. 4) is that It synchronizes the receiving of Ethernet data packets 
according to 25 MHz clock signal which is asynchronous with the locally generated clock 
5 signal. Note that the 25 MHz clock signal is derived from the incoming Ethernet data 
packets and is applied to the transmit buffer 252A for storing the packet data while the 
locally generated clock signal is applied to the transmit buffer 252A for retrieving Ethernet 
packet data from the transmit buffer. Thus, tlie arbitration logic, packet counter 272 and 
threshold compare logic 274 operate according to the derived 25 MHz clock, while the read 
10 packet state machine 276 and the radio framer 228 (Fig. 4) operate according to the locally 
generated clock. 

In the preferred embodiment, the locally generated clock signal is 27.5 MHz. 
Because the locally generated clock signal is at a higher rate than the clock signal derived 
from the incoming Ethernet packets, in absence of the synchronizing portion 268 of the 

15 rate control logic 250, it would be possible for the transmit buffer 252A to become empty 
while an Ethernet packet is still being received into the transmit buffer 25 2 A. Thus, the 
synchronizing portion 268 of the rate control logic 250 avoids this potential problem. 

Assuming that an adaptive counter measure is employed which reduces the rate at 
which radio frames 350 (Fig. 6) are formed, this also reduces the rate at which the data 

20 from Ethernet packets is retrieved from the transmit buffer 252A. Assuming this rate is 

below 25 MHz (e.g. 13,75 MHz), then a complete packet need not be stored in the transmit 
buffer 252A prior to initiating retrieval of such a packet. In the preferred embodiment, 
under such circumstances, cut-through is employed wherein the incoming Ethernet data 
packet is supplied to the radio framer 228 (Fig. 4) prior to the complete packet being 

25 received into the transmit buffer 252A. 

Fig. 13 illustrates a schematic block diagram of a radio frame-to-Ethernet 
synchronizing portion 280 of the rate control logic 250 (Fig. 4) according to the present 
invention. The receive buffer 252B forms a portion of the rate buffers 252 (Fig. 4), 
100BASE-T Fast Ethernet packets recovered from radio frames 350 (Fig. 6), and a 

30 recovered receive data valid signal RXDV, are received into the receive buffer 252B from 
the synchyde-synch block 256, as explained above in reference to Fig. 4, The internally 
generated clock signal at 27.5 MHz is synchronous with the radio frames 350 (Fig, 6) and 
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utilized for clocking the incoming Ethernet data packets into the receive buffer 252B. 
Ethernet data packets stored in the receive buffer 252B are retrieved and provided to the 
transceiver 212 (Fig. 3) according to a 25 MHz clock. 

If no spectrum spreading is employed for data communicated via the link 1 02, then 
5 the clock signal utilized for clocking data into the receive buffer 252B preferably operates 
at 27.5 MHz. Because the clock signal utilized for retrieving data from the receive buffer 
252B preferably operates at 25 MHz, there is no possibility that the receive buffer 252B 
will become empty while an Ethernet packet is still being received into the receive buffer 
252B. 

10 However, in the event that spectrum spreading is employed for data communicated 

via the link 102, however, the clock signal applied to the receive buffer 252B can operate 
at a lower frequency (e.g. 13.75 MHz), that is synchronous with the internally generated 
27.5 MHz clock signal. In which case, it would be possible for the receive buffer 252B to 
become empty while an Ethernet packet is still being received into the receive buffer 252B. 

15 Thus, the synchronizing portion 280 of the rate control logic 250 avoids this potential 
problem, as explained below. 

The recovered receive data valid signal is provided by the synch/de-synch block 
256 (Fig, 4) to a first input of an arbitration logic block 282 and to a read packet state 
machine 288. In response to a complete Ethernet packet being stored in the receive buffer 

20 252B, as indicated by the recovered data valid signal, the arbitration logic 282 instructs a 
packet counter 284 to increment a count by one. As Ethernet packets are retrieved from 
the receive buffer 252B, a data valid signal RXDV is also retrieved from the receive buffer 
252B. This data valid signal RXDV is utilized by the transceiver 212 (Fig. 3) and applied 
to a second input to the arbitration logic block 282. In response to a complete Etliernet 

25 data packet being removed from the receive buffer 252B, and supplied to the transceiver 
212 (Fig. 3), as indicated by the data valid signal RXDV, the arbitration logic block 282 
instructs the packet counter 284 to decrement the count by one. Thus, the packet counter 
284 maintains a current count of complete Ethernet data packets in the receive buffer 
252B. 

30 This count is provided by the packet counter 284 to a threshold compare block 286. 

The threshold compare block 286 notifies a read packet state machine 288 when a 
sufficient number of complete Ethernet packets are stored in the receive buffer 252B to 
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initiate retrieval of the packets from the receive buffer 252B. In tlie preferred embodiment, 
only one complete Ethernet packet need be stored in the receive buffer 252B to initiate the 
read packet state machine 288 to retrieve the packet. Once initiated to retrieve a packet, 
the read state machine 288 activates a first input to a logic AND gate 290. A second input 
5 to the logic AND gate 290 receives a LAN read clock enable signal from the transceiver 
212 (Fig. 3). This LAN read clock enable signal is activated when the transceiver 212 is 
ready to receive the Ethernet packet data for communication to the TFU 106 (Fig. 1). 

An output of the logic AND gate 290 is coupled to a read input of the receive 
buffer 252B for retrieving the packet from the receive buffer 252B. As it is being 

10 retrieved, the packet is provided to the transceiver 212. Accordingly, this aspect of the 
present invention prevents the receive buffer 252B from being emptied while a packet is 
being provided from the receive buffer 252B to the transceiver 212 (Fig. 3). 

A first alternate approach for avoiding overflow in the receive buffer 252B of the 
terminal 100 during periods when data is being communicated over the wireless link 102 

15 according to maximum transmission rates can be implemented when an Ethernet data 
source (e.g. a terminal in the LAN 128') is operating at a slightly higher rate than the 
reference clock utilized for removing data from the receive buffer 252B. This approach 
includes monitoring the current depth of the receive buffer 252B, and as the amount of 
occupied storage space increases, then the transmission rate of the Ethernet data source is 

20 adjusted upward utihzing a voltage controlled oscillator. As the amount of occupied 
storage space decreases, then the transmission rate of the transceiver 212 is adjusted 
downward. When the buffer is nearly empty, the transmission rate is set to the nominal 
level of 25 Mhz. Both the originating and local frequency references must be within 100 
parts per million high or low of the IEEE 802.3 Ethernet specified 25 MHz. 

25 A second alternate approach for avoiding overflow in the receive buffer 252B of the 

terminal 100 during periods when data is being communicated over the wireless link 102 
according to maximum transmission rates, involves reducing the minimum inter-packet gap 
utilized for forwarding packets removed from the receive buffer 252B. For example, rather 
than utilizing 12 byte-times to represent the inter-packet gap, the inter-packet can be 

30 represented by 1 1 byte-times. This may result in a violation of the IEEE 802.3 standard 
for the minimum inter-packet gap, however, this result is expected to be more desirable 
than the loss of packet data should the receive buffer 252B overflow. 
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A third alternate approach for avoiding overflow in the receive buffer 25 2B of the 
terminal 100 during periods when data is being communicated over the wireless Hnk 102 
according to maximum transmission rates, is for the microprocessor 230 of the terminal 
100 to send a link control command to the terminal 100'. This link control command 
5 provides a pause packet to the layer-two switch 600' (the layer-two switch 600' and 
associated packet buffers 602' are not shown, however, because the terminal 100' is 
identical to the terminal 100, it will be understood tliat the layer-two switch 600 and packet 
buffers 602 illustrated in Fig. 16 have identical counter-parts in the terminal 100', referred 
to herein as 600' and 602'). The pause packet causes the switch 600' to temporarily store 
10 packets in its associated packet buffers 602' rather than sending such packets to the receive 
buffer 252B. 

Fig. 14 illustrates a schematic block diagram of the microwave module (MWM) 246 
(Fig. 3) and microwave antenna 508 according to the present invention. The MWlvI 
module 246 constitutes a wireless transceiver for implementing wireless communication 

15 over the link 102 (Fig. 1). The MWM 246 includes a transmit up-converter (TX-U/C) 500 
coupled to receive signals from the transmit modulator 242. The TX U/C 500 up- converts 
490 MHz IF signals received from the transmit modulator 242 to microwave frequency for 
transmission over the link 102. In the preferred embodiment, the frequency of transmission 
over the hnk 102 is selectable under control of the micro-processor 230 in 12.5 MHz steps 

20 across two adjacent microwave bands (e.g. 38.6-39.2 GHz and 39.3-40.0 GHz). 

A transmit power amplifier (TX-P/A) 502 coupled to the transmit up-converter 500 
amplifies the microwave signals provided by the transmit up-converter 500 to an 
appropriate level. Tn the preferred embodiment, the transmit power amplifier 502 has a 1- 
dB compression point at about 17 dBm. The nominal power is preferably set to 11 dBm, 

25 however, the transmit power is selectively controllable by the micro-processor 230 in 
response to detected rain fade, detected interference or in response to a link control 
command. 

A transmit sub-band filter 504 coupled to the output of the transmit power amplifier 
502 filters unwanted frequencies from the microwave signal to be transmitted over the link 
30 102. The microwave module 246 includes a di-plexer 506 coupled to the transmit sub- 
band filter 504. The di-plexer 506 couples the microwave module 246 to the microwave 
antenna 508 for full-duplex communication over the link 102 by the microwave module 
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246. The antenna 508 transmits microwave signals over the link 102 and receives 
microwave signals from the link 102. 

A microwave signal received from the link 102 by the antenna 508 is provided to a 
receive sub-band filter 510 via the di-plexer 506. The receive sub-band filter 510 filters 
5 unwanted frequencies from the received signal and provides a filtered signal to a low noise 
amplifier (LNA) 512. Then, the received signal is dovwi-converted, preferably to 150 MHz 
IF by a receive down-converter (RX D/C) 514. It will be apparent, however, that a 
frequency other than 150 MHz can be selected. An intermediate frequency automatic gain 
control (IF AGC) circuit 516 adjusts the level of the down-converted signal to a 

10 predetermined level. An output formed by the IF AGC 516 circuit 514 is provided to the 
receive demodulator 244. 

According to the preferred embodiment of the present invention, a microwave 
frequency synthesizer 518 included in the microwave module 246 is locked to a precision 
crystal reference signal and is digitally controlled by the microprocessor 230 (Fig. 3) with a 

15 12.5 Mhz step capability. Two outputs of the frequency synthesizer 516 are each locked to 
the same crystal reference signal and provided to the transmit up- converter 500 and to the 
receive down-converter 514 for performing up-conversion and down-conversion, 
respectively. 

Fig. 15 illustrates a perspective view of the microwave antenna 508 and a housing 
20 550 for the outdoor unit 104 (Figs. 1 and 3) according to the present invention. The 

housing 550 protects tire ODU 104 fi:om environmental conditions, such a rain, snow and 
sunlight, which can be encountered on roof-tops where the ODU 104 is typically 
positioned. The housing 550 includes a flange 552 for attaching the antenna 508 and 
cooling fins 554 for dissipating heat generated by the electrical circuits of the ODU 104. 
25 A cable 556 which is preferably weather-resistant and electrically- shielded, extends 

between, and electrically connects, the ODU 104 to the TFU 106 (Figs. 1 and 3). Thus, 
the cable 556 includes each of the cables 108, 110, 112 and 114 (Figs. 1 and 3). 

Fig. 16 illustrates a schematic block diagram of an alternate embodiment of the 
digital signal processing MAC 222' and radio framer 228' according to the present 
30 invention. Elements illustrated in Fig. 16 having a one-to-one functional correspondence 
with elements illustrated in Fig. 4 are given the same reference numeral, but are 
distinguished by the reference numeral being primed. In one respect, the arrangement 
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illustrated in Fig. 16 differs from that illustrated in Fig. 4 in that a layer-two switch 600 
and associated packet buffer 602 are added. 

According to the embodiment of the MAC 222' illustrated in Fig, 16, the Ethernet 
switch 600 is coupled to the transceivers 212, 214 (Fig. 3) and to packet buffers 602. The 
5 packet buffers 602 provide a temporary storage for packets while being directed through 
the switch 600. The switch 600 is also coupled to the microprocessor 230 via an interface 
604 and to the rate control logic 250' via an interface 606. The switch 600 can be a 
conventional layer-two Ethernet network switch having a 100BASE-T port coupled to the 
cable 108 and a lOBASE-T port coupled to the cable 110. In the preferred embodiment, 

10 the switch 600 also includes a lOBASE-T port which is coupled to the microprocessor 230 
via the interface 604 and a 100BASE-T Mil port which is coupled to the rate control logic 
250' via the interface 606. 

Network management and link control traffic in the form of Ethernet packets 
received by the switch 600 from the transceiver 212, the transceiver 214, or the interface 

15 606, and which include the MAC address of the microprocessor 230 as a destination 

address are directed to the microprocessor 230 via the interface 604 by the switch 600. 
Similarly, the microprocessor 230 sends Ethernet packets to the rate control logic 250' via 
the switch 600 for communication over the link 102 and to the transceivers 212, 214 via 
the switch 600 for communication with the router or switch 1 16 (Fig. 1). 

20 In the preferred embodiment, the switch 600 implements a flow control technique in 

accordance with IEEE 802. 3x. According to the present invention, the flow control 
technique is selectively initiated by the rate control logic 250' sending a pause packet to 
the switch 600 via the interface 606. Each pause packet includes an indication of a how 
long the flow control technique is to remain active. In response to receiving the pause 

25 packet, the switch 600 does not provide packets which are received from the transceivers 
212, 214 or from the interface 604 to the interface 606. Rather, when the flow control 
technique is active, the switch 600 temporarily queues such packets by storing them in the 
packet buffers 602. The pause signal can preferably be initiated for several hundred milli- 
seconds while packets are received from the transceivers 212, 214 or from the interface 604 

30 without loss of any such packets. When the indicated time expires, the flow control 

technique is deactivated. Upon deactivation of the flow control technique, the switch 600 
retrieves the queued packets from the packet buffers 602 and provides them to the rate 
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control logic 250' via the interface 606. 

The rate control logic 250' sends a pause packet with an indicated activation period 
in response to a hah control signal received from the rate buffers 252' via a signal line 
608. When activated, the halt signal provided via the signal line 608 indicates that the rate 
5 buffers 252' are nearly full. The indicated activation period included in the pause packet is 
appropriate to allow sufficient data to be removed from the rate buffers 252' and 
communicated over the hnk 102 via radio frames 350. 

As an example of operation of the MAC 222', assume that rain fade or interference 
is detected in the link 102 by an increase in a measured bit error rate (BER). In response, 

10 a link control command is issued by the microprocessor 230 which causes the data rate for 
the link 102 to be reduced. As a result of this lower data rate for the hnk 102, radio 
frames 350 are formed less quickly and, thus, data is removed from the rate buffers 252' at 
a lower rate. If the reduced data rate results in the rate buffers 252' becoming nearly full, 
the rate buffers 252' activate the hah signal via the signal line 608. In response, the rate 

15 control logic 250' sends a pause packet to the switch 600. Then, while flow control is 
active, packets received &om the transceiver 212, 214 or the interface 604 for 
communication over the link 102 are temporarily queued in the packet buffers 602. 
Accordingly, the MAC 222' according to the present invention implements a flow control 
technique for adapting a current rate of data transmission over the link 102 to a rate at 

20 which Ethernet packets are received by tlie MAC 222' from the TFU 106 (Figs. 1 and 3), 
without loss of the Ethernet packets. 

In addition, the embodiment of the MAC 222' illustrated in Fig. 16 includes an 
encryption/decryption block 612 coupled between the rate control logic 250' and the rate 
buffers 252'. Accordingly, for packets to be transmitted over the link 102, the 

25 encryption/decryption block 612 encrypts the Ethernet data packets prior to temporarily 
storing the data packet in the rate buffers 252'. Conversely, Ethernet packets received 
from the link 102 are decrypted by the encryption/decryption block 612 before being 
provided to the switch 600. A memory buffer 614 coupled to the encryption/decryption 
block 612 provides a temporary memory store for use during encryption/decryption of the 

30 Ethernet packets. An encryption start control signal line 610 coupled between the 
encryption/decryption block 612 and the length/status buffer 254' is utilized by the 
encryption/decryption block 612 to instruct the length/status buffer 254' to provide an 
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encryption tag and sequence number to the packet synch/de- synch block 256'. This 
arrangement which includes the encryption/decryption block 612 provides an advantage 
over the arrangement illustrated in Fig. 4 in that data security is enhanced. 

Fig. 17 illustrates a frame structure 700 for reformed 100BASE-T Ethernet data 
5 packets formed by the MAC 222' and radio framer 228' illustrated in Fig. 16. When the 
packet is removed from the rate buffers 252' and reformed for insertion to a radio frame 
350 (Fig. 6), the encryption tag and sequence number provided by the length/status buffer 
254' (Fig. 16) are appended to the reformed packet frame 700 in an encryption tag field 
702 and a sequence number field 704, respectively. The encryption tag indicates an 

10 appropriate key box utilized to encrypt the data while the sequence number provides 
synchronization information to the terminal which receives the reformed Ethernet data 
frame 700 irom the wireless link 102. Fields of the reformed packet frame 700 illustrated 
in Fig. 17 which have one-to-one functional correspondence with those illustrated in Fig. 5 
are given the same reference numeral primed. 

15 Referring to Fig. 16, this arrangement also differs from that illustrated in Fig. 4 in 

that the PN randomizer/de-randomizer 262 and the differential encoder/decoder 264 are 
omitted and, instead, an adaptive countermeasures block 616 takes their place. The 
adaptive countermeasures block 616 responds to a rate change command issued by the 
microprocessor 230 by changing the rate at which data is communicated over the wireless 

20 link 102. The rate at which data is communicated can be in response to a detected increase 
in BER due to rain fade or can be to reduce interference with nearby wireless links, such 
as to reduce interference between subscriber terminals in a point-to-multipoint network. 

Fig. 18 illustrates a schematic block diagram of the adaptive countermeasures block 
616 according to the present invention. A multiplexer 750 is coupled to the framing block 

25 260' (Fig. 16) for communicating radio super frames 380 (Fig. 7) with the framing block 
260'. A first PN randomizer/de-randomizer 262A\ a second PN randomizer/de-randomizer 
262B' and a first differential encoder/de-coder 264A' are each coupled to receive selected 
radio super frames 380 from the multiplexer 750 depending upon conditioning of the 
multiplexer 750 by the rate change control signal. 

30 In the preferred embodiment, the PN randomizer/de-randomizers 262A', 262B, 

262C' perform scrambling on the radio super frames 380 in an identical manner to the PN 
randomizer /de-randomizer 262 illustrated in Figs. 4 and 8. Super frames 380 scrambled 
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by the PN randomizer/de-randomizer 262A' are provided to a second differential 
encoder/decoder 264B'. The differential encoder /decoders 264A', 264B' and 264C' 
preferably perform encoding and decoding in an identical manner to the differential 
encoder/de-coder 264 illustrated in Fig. 4. Then, super frames 380 encoded by the second 
5 encoder/decoder 264B' are provided to a QAM constellation mapper 266'. The QAM 

constellation mapper 266' preferably performs QAM constellation mapping in an identical 
manner to the QAM constellation mapper 266 illustrated in Figs. 4 and 16. A multiplexer 
756 is coupled to the QAM constellation mapper 266' for communicating encoded radio 
super frames 380 v^ith the Rx demodulator 244 (Fig. 3) and Tx modulator 242 (Fig. 3). 

10 Thus, when a first path through the PN randomizer /de-randomizer 262A', the second 

differential encoder/decoder 264B' and QAM constellation mapper 266' is selected, radio 
super frames 380 are conditioned identically for transmission and reception as when 
passing through the PN randomizer/de -randomizer 262, differential encoder/decoder 264 
and QAM constellation mapper illustrated in Fig. 4. In the preferred embodiment, the first 

15 path conditions the radio super frames 380 according to 16 QAM. 

The third differential encoder/decoder 264C' is coupled to the PN randomizer/de- 
randomizer 262B' and to a quadrature phase-shift (QPSK) constellation mapper 752A. The 
QPSK constellation mapper 752A maps portions of the radio frame 350 to QPSK symbols 
according to quadrature phase-shift keying techniques (QPSK). Super frames 380 are 

20 communicated between the QPSK constellation mapper 752A and the multiplexer 756. 

Thus, when a second path through the PN randomizer/de-randomizer 262B', the differential 
encoder/decoder 264C' and QPSK constellation mapper 752A is selected, radio super 
frames 380 are conditioned for transmission and reception according to QPSK formal. 
A second QPSK constellation mapper 752B is coupled to the differential 

25 encoder/decoder 264A' and to a PN randomizer/de-randomizer 262C'. The QPSK 
constellation mapper 752B maps portions of the radio frame 350 to QPSK symbols 
according to quadrature phase-shift keying tecimiques (QPSK) identically to the QPSK 
constellation mapper 752A. Super frames 380 are communicated between the QPSK 
constellation mapper 752B and the multi-plexer 756. Thus, when a third path through the 

30 differential encoder/decoder 264A', QPSK constellation mapper 752B and PN 

randomizer/de-randomizer 262C', is selected, radio super frames 380 are conditioned for 
transmission and reception according to QPSK format with spectrum spreading. Upon 
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reception, super frames 380 routed through this third path are appropriately de-spreaded 
and decoded for communication with the framing block 260'. 

So that the radio super frames 380 are properly received by a receiving terminal 
(e.g. the terminal 100 illustrated in Fig. 1), it is important the appropriate path is selected 
5 through the adaptive countermeasures block 616 for each radio super frame 380. This can 
be accomplished by the transmitting terminal 100 notifying the receiving terminal 100' of 
the manner and rate at which the transmitting terminal 100 is transmitting radio super 
frames 380. 

Fig. 19 illustrates a chart of received signal level vs. time as a result of rain fade. 

10 Refer to Figs. 1 and 20 and assume that the terminal 100 is receiving data from the 

terminal 100' via the wireless link 102. When rain occurs between the terminals 100 and 
100', the level of the microwave carrier signal received by the terminal 100, the received 
signal level (RSL) falls over time as the rain increases over time. Thus, depending upon 
the weather conditions, the RSL can eventually fall from a normal level to below threshold 

15 levels set at LI -L 8. When the RSL is above the threshold level LI, this represents an 

insubstantial level of rain fade. However, when the RSL is below the threshold level L8, 
this represents a extreme level of rain fade. The threshold levels L2-L7 represent 
progressively increasing levels of rain fade between the extremes represented by LI and 
L8. The rate at which the RSL falls (the measured slope) can also vary depending upon 

20 the weather conditions. Similarly, as the weather conditions improve, the RSL can return 
the normal level. In response to rain fade, the bit error rate (BER) tends to rise. Thus, the 
adaptive countermeasures implemented by the present invention can detect the presence of 
rain fade by measuring the RSL or the BER. 

In addition, the BER tends to rise in response to interference between nearby 

25 wireless links. A significant difference between rain fade and interference, however, is that 
in the event of interference, the RSL can remain at a normal level while the BER rises. 
Accordingly, the adaptive countermeasures implemented by the present invention can detect 
the effects of interference by measuring the BER. 

Accordingly, in the preferred embodiment, the present invention responds to both 

30 the measured RSL and the measured BER. To simplify the following discussion, an 
example involves a response to rain fade detected by measuring the RSL. It will be 
apparent, however, that an identical response can be made by measuring the BER. Thus, 
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in the following discussion, the BER, rather than the RSL, is compared to the various 
thresholds disclosed (in addition, the operators > and < are exchanged with each other). In 
addition, it will be apparent that a response can be made simultaneously to both the RSL 
and to the BER with appropriate modifications. 
5 Fig. 20 illustrates a flow diagram for implementing counter-measures according to 

the present invention in response to measured RSL. In the preferred embodiment, the 
microprocessor 230 (Fig. 3) is appropriately programmed to implement the flow diagram 
illustrated in Fig. 20. In a first state 800, the terminal 1 00 is configured for 
communicating data at 16 QAM. Then, program flow moves from the state 800 to a state 

10 802. In the state 802 a determination is made whether the RSL has fallen below the 

threshold level LI. If the RSL has not fallen below the threshold level LI, then program 
flow returns to the state 800, 

If, however, the RSL has fallen below the threshold level L2, then program flow 
moves to a state 804. In the state 804, a determination is made whether the rate at which 

15 the RSL is changing exceeds a first predefined slope Zl , If the rate does not exceed the 
predefined slope Zl, then program flow moves from the state 804 to a state 806. In the 
state 806, a determination is made whether the RSL has fallen below the threshold L4. If 
the RSL has not fallen below the threshold L4, then program flow returns to the state 800. 
If, however, the RSL has fallen below the threshold L4, then program flow moves 

20 from the state 806 to a state 808. If the determination made in the state 804 resulted in a 
determination that the rate did exceed the predefined slope Zl, then the program flow 
moves from the state 804 to a state 808. In the state 808, the terminal is configured to 
transmit data according to QPSK (without spectrum spreading). Then program flow moves 
from the state 808 to a state 810. 

25 In the state 810, a determination is made as to whether the RSL is above the 

threshold L5. If the RSL is above the level L5, then program flow moves from the state 
810 to a state 812, In the state 812, a determination is made as to whether the rate at 
which the RSL is changing exceeds a predefined slope Z2. If the rate exceeds the slope 
Z2, then program flow returns to the state 800. If the rate does not exceed the slope Z2, 

30 then program flow moves from the state 812 to a state 814. 
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In the state 814, a determination is made whether the RSL is above the threshold 
level LI. If not, then program flow returns to the state 808. If in the state 814, the RSL 
is above the threshold LI, then program flow returns to the state 800. 

If, in the state 810, the RSL is not above the threshold L5, then program flow 
5 moves to a state 816. In the state 816, a determination is made whether the RSL is below 
the threshold L6. If the RSL is not below the threshold L6, program flow returns to the 
state 808. If, in the state 816, the RSL is below the threshold 816, then program flow 
moves from the state 816 to a state 818. In the state 816, a determination is made if the 
rate of change in the RSL exceeds a predefined slope Z3. If the slope Z3 is not exceeded 
10 program flow moves from the state 818 to a state 820. 

In the state 820, a determination is made whether the RSL is below the threshold 
L8. If not, then program flow returns to the state 808. If in the state 820 the RSL is not 
below the threshold L8, the program flow moves to a state 822. In addition, if, in the state 
818, the slope Z3 is exceeded, program flow moves to the state 822. In the state 822 the 
15 terminal 100 is configured for communicating data according to QPSK with spectrum 
spreading. 

From the state 822, program flow moves to a state 824. In the state 824, a 
determination is made whether the RSL is below the threshold L7. If the RSL is not 
below the level L7, then program flow returns to the state 822. If, in the state 824, the 

20 RSL is above the threshold L7, then program flow moves from the state 824 to a state 826. 
In the state 826, a determination is made whether the rate of change in the RSL exceeds a 
predefined slope Z4. If so, program flow returns to the state 808. If. in the state 826, the 
slope Z4 is not exceeded, then program flow moves to a state 828. 

In the state 828, a determination is made whether the RSL is above the threshold 

25 828. If so, program flow returns to the state 808. If, in the state 828, the RSL is not 
above the threshold 828, then program flow returns to the state 822. 
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An important aspect of the present invention is that hysteresis is introduced in the 
flow diagram for changing the manner of data communication in the states 800, 808 and 
822, based upon the RSL. Thus, for example, to change from 16 QAM to QPSK, the RSL 
must fall below L2. However, to change from QPSK to 16 QAM, the RSL must rise 
5 above LI where LI is higher than L2. This hysteresis reduces the frequency at which the 
manner of communicating data is changed and prevents oscillations from occurring 
between any two of the states 800, 808 and 822. 

In a point-to-multipoint MAN, a single network node communicates radio super 
frames 380 with a plurality of otlter nodes. Fig. 21 illusfrates a point-to-multipoint 

10 metropolitan area network divided into sectors having inner and outer radii according to the 
present invention. A single node at a hub 900 communicates with a plurality of subscriber 
nodes, designated "r" located as various radial distances from the hub 900 and in different 
directions (sectors). An important advantage of the present invention that changes in 
maimer in which data is communicated over a wireless link can be utilized to reduce 

15 interference between nodes in a same sector, but at a different radial distances from the hub 
900. 

As an example, assume a first subscriber node 902 is located in a sector 904 at a 
radial distance from the hub 900 that is less than 2 Km. Assume that a second subscriber 
node 906 is also located in the in the sector 904 but at a radial distance from the hub 900 

20 that is more than 2 Km and less than 4 Km, If both subscriber nodes 902, 906 
communicate with the hub 900 in the same manner, there is a probability that 
communications intended for the node 902 will interfere with communications intended for 
the node 906. In the preferred embodiment of the present invention, however, the adaptive 
countermeasures block 616 (Figs. 14 and 16) of the first subscriber node 902 is conditioned 

25 to communicate data in a first maimer (e.g. according to 16 QAM), whereas, the adaptive 
countermeasures block 616 of the second subscriber node 906 is conditioned to 
communicate data in a second manner (e.g. according to QPSK). The adaptive 
countermeasures block 616 of hub 900 is conditioned for communication with either of the 
nodes 902, 906, by changing back and forth between the first and second manner of 

30 communicating. This is accomplished by appropriately conditioning the rate control signal 
applied to the multiplexers 750, 756 (Fig. 18) of the hub 900 depending upon which node 
902, 906 the hub is currently communicating with. 
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In the preferred embodiment of the present invention, a security authentication 
protocol is implemented for data security purposes against eavesdroppers. Fig. 22 
illustrates a wireless link 102 betvi^een two terminals 100 and 100' wherein an unauthorized 
terminal 950 is attempting to eavesdrop on communication between the two terminals 100, 
5 100'. Each terminal 100, 100' and 950 is preconditioned to periodically authenticate the 
other terminal opposite the communication link. For this purpose, each terminal is 
assigned a unique password. 

Link authentication is accomphshed in the following manner: Once communication 
between the terminals 100 and 100' is established, the terminals 100, 100' exchange their 

10 passwords. Then, at periodic intervals, the terminal 100 sends a challenge message to the 
terminal 100'. The challenge message includes an identification number and a random 
number. The terminal 100' receives the random number and calculates a response based 
upon a mathematical combination of the random number and its unique password. Then 
the terminal 100' then sends the calculated response to the terminal 100 along with the 

15 same identification number it received. 

The terminal 100 then matches the identification number it receives from the 
terminal 100' to the challenge message it previously sent and then compares the response it 
received to an expected response. The terminal 100' determines the expected response 
based upon its knowledge of the imique password associated whh the terminal 100' and 

20 upon its knowledge of the random number included in the challenge. If the received 

response matches the expected response, the terminal 100' sends a success message to the 
terminal 100'. Data communication then resumes. Each terminal 100, 100' periodically 
authenticates the other in a symmetrical manner. 

If, however, the received response does not match the expected response, an alarm 

25 is set in the terminal 100. In response to the alarm, the terminal 100 maintains the wireless 
communication link 102 by sending and receiving radio frames 350 (Fig. 6) with the 
terminal 100, however, the radio frames 350 sent by the terminal 100 no longer carry 
100BASE-T Ethernet data. Instead, the inter-packet gap code is sent. In addition, the 
terminal 100 is configured to no longer detect and separate 100BASE-T Ethernet packets 

30 from received radio frames. Thus, the 100BASE-T traffic in both directions is disabled. 
The terminals continue attempting to re- authenticate the link, and if successful, 
communication of 100BASE-T packets resumes. 
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It is important to note that each terminal 100, 100', 950, is configured to 
successfully receive radio frames at all times, but us configured to successfully receive 
100BASE-T packet data only if it receives a response to a challenge message which 
matches an expected response. The determination of vi'hether a response to a challenge 
5 message is appropriate depends upon knowledge of the random number included in the 
challenge message. 

Assume that once the link 102 is established, the terminal 950 attempts to 
eavesdrop. This is an unauthorized intruder who is attempting to receive data from the 
link. It is expected in such a situation, that the terminal 950 will have its transmitter 

10 muted in an attempt to escape detection. Because the transmitter of the terminal 950 is 
muted, it cannot authenticate with either terminal 100, 100'. Thus, although the terminal 
can receive responses to challenge messages sent by the terminals 100, 100', it cannot 
match such a response to an expected response because the terminal 950 will not have 
knowledge of the random number sent with the response. Thus, an alarm will be set in the 

15 terminal 950. Once this occurs, the terminal 950 can no longer receive 100BASE-T 
packet data. Accordingly, the attempted eavesdropping is prevented and data security 
maintained. 

Fig. 23 illustrates an embodiment according to the present invention having multiple 
digital processing MACs 222A", 222B" multiplexed to a single radio framer 228". The 

20 MACs 222A", 222B" can each be identical to the MAC 222' illustrated in Fig. 16 while 
the radio framer 228" can be identical to the radio framer 228' illustrated in Fig. 16. This 
embodiment enables multiple 100BASE-T Ethernet packets to be received simultaneously, 
one for each MAC 222 A", 222B". The Ethernet packets are temporarily stored in each 
MAC 222A", 222" and then provided to the radio framer 228" via a multiplexer 980 

25 according to time division multiplexing. The time division multiplexed data is then 

communicated over the wireless hnk 102. According to this embodiment, the wireless link 
102 is configured to communicate data at 200 Mbps. It will be apparent that a number, n, 
of MACs can be coupled to the multiplexer 980 thereby achieving a n x 100Mbps data rate 
for the wireless link 102. Such an arrangement is limited by the maximum bandwidth 

30 capacity for the wireless link 102. 

The present invention has been described in terms of specific embodiments 
incorporating details to facilitate the understanding of the principles of construction and 
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operation of the invention. Such reference herein to specific embodiments and details 
thereof is not intended to Umit the scope of the claims appended hereto. It will be 
apparent to those skilled in the art that modifications may be made in the embodiment 
chosen for illustration without departing from the spirit and scope of the invention. 
5 Specifically, it will be apparent to one of ordinary skill in the art that the device of the 
present invention could be implemented in several different ways and the apparatus 
disclosed above is only illustrative of the preferred embodiment of the invention and is in 
no way a limitation. 
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Claims 



What is claimed is: 

11. A method of communicating data packets in a wireless network, wherein the 

2 method comprises steps of: 

3 a. receiving a first data packet wherein the first data packet is received 

4 according to a first rate of data communication; 

5 b. receiving a second data packet wherein the second data packet is received 

6 according to a second rate of data communication and wherein the step of 

7 receiving the second data packet is performed simultaneously with the step 

8 of receiving the first data packet; 

9 c. time division multiplexing the first data packet and the second data packet to 

10 a radio frame; and 

11 d. communicating the radio frame via a vidreless link wherein the radio frame is 

12 communicated at a third rate of data communication wherein the third rate 

13 of data communication is equal to at least a sum of the first rate of data 

14 communication and the second rate of data communication. 

1 2. The method according to claim 1 further comprising a step of buffering the 

2 first data packet prior to performing the step of time division multiplexing wherein the step 

3 of buffering the first data packet synchronizes the first data packet to the radio frame, 

1 3. The method according to claim 2 further comprising a step of buffering the 

2 second data packet prior to providing the second data packet to the radio framer wherein 

3 the step of buffering the second data packet synchronizes the second data packet to the 

4 radio frame. 

1 4. The method according to claim 3 wherein the first and second data packets 

2 are received from an Ethernet local area network. 
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1 5. The method according to claim 3 wherein the first data packet is a 100 

2 mega-bits per second (Mbps) Fast Ethernet data packet. 

1 6. The method according to claim 5 wherein the second data packet is a 10 

2 Mbps Ethernet data packet. 

1 7. The method according to claim I fiirther comprising steps of: 

2 a. receiving a third data packet; and 

3 b. time division multiplexing the third data packet to the radio frame. 

1 8. The method according to claim 1 further comprising a step of encrypting the 

2 first data packet prior to performing the step of time division multiplexing. 

19. A method of communicating data packets in a wireless network, wherein the 

2 method comprises steps of: 

3 a. receiving a first Fast Ethernet data packet into a first media access control 

4 (MAC) unit wherein the first Fast Ethernet data packet is received at a rate 

5 of 100 mega-bits per second (Mbps); 

6 b. receiving a second Fast Ethernet data packet into a second MAC unit 

7 wherein the second Fast Ethernet data packet is received at a rate of 1 00 

8 Mbps and wherein the step of receiving the second Fast Ethernet data packet 

9 is performed simultaneously with the step of receiving the first Fast Ethernet 

1 0 data packet; 

1 1 c. providing the first Fast Ethernet data packet and the second Fast Ethernet 

12 data packet to a radio framer according to time division multiplexing thereby 

13 forming a time division multiplexed radio frame; and 

14 d. communicating the time division multiplexed radio frame via a wireless link 

15 wherein the time division multiplexed radio frame is communicated at a rate 

16 of at least 200 Mbps. 

1 10. The method according to claim 9 wherein the first Fast Ethernet data packet 

2 is received from an Ethernet local area network coupled to the first MAC unit. 
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1 11. The method according to claim 9 further comprising steps of: 

2 a. receiving a third Fast Ethernet data packet into a third MAC unit wherein 

3 the third Fast Ethernet data packet is received at a rate of 100 Mbps; and 

4 b. providing the third Fast Ethernet data packet to the radio framer according to 

5 time division multiplexing. 



1 12. The method according to claim 11 wherein the time division multiplexed 

2 radio frame is communicated at a rate of at least 300 Mbps. 

1 13. The method according to claim 9 further comprising a step of buffering the 

2 first Fast Ethernet data packet in the first MAC unit prior to providing the first Fast 

3 Ethernet data packet to the radio framer. 

1 14. The method according to claim 13 wherein the step of buffering the first 

2 Fast Ethernet data packet synchronizes the first Fast Ethernet data packet to the radio 

3 frame. 



1 15. The method according to claim 14 further comprising a step of buffering the 

2 second Fast Ethernet data packet in the second MAC unit prior to providing the second 

3 Fast Ethernet data packet to the radio framer wherein the step of buffering the second Fast 

4 Ethernet data packet synchronizes the second Fast Ethernet data packet to the radio frame. 



1 16. The method according to claim 9 further comprising a step of encrypting the 

2 first Fast Ethernet data packet prior to performing the step of providing the first Fast 

3 Ethernet data packet to the radio framer. 



1 17. The method according to claim 9 further comprising a step of receiving an 

2 Ethernet data packet into the first MAC unit wherein the Ethernet data packet is received at 

3 a rate of 10 Mbps. 

1 18. A terminal for a wireless link in a metropolitan area, the terminal 

2 comprising: 
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3 a. a first data packet receiver for receiving data packets for communication 

4 over a wireless link; 

5 b. a second data packet receiver for receiving data packets for communication 

6 over the wireless link; 

7 c. a multiplexer having a first input, a second input and an output wherein the 

8 first input is coupled to receive the data packets from the first data packet 

9 receiver and wherein the second input is coupled to receive the data packets 

10 from the second data packet receiver and wherein the output of the 

1 1 multiplexer provides time-division multiplexed data; 

12 d, a packet formatting apparatus coupled to the output of the multiplexer for 

13 formatting the time division multplexed data according to radio frames; and 

14 e. a wireless transceiver coupled to the packet formatting apparatus for 

1 5 communicating the radio frames over a wireless link. 

1 19. The terminal according to claim 18 wherein the first data packet receiver is a 

2 first media access control (MAC) unit. 

1 20. The terminal according to claim 19 wherein the first MAC unit further 

2 comprises: 

3 a. a first rate control unit; and 

4 b. a first rate buffer coupled to the first rate control unit for temporarily storing 

5 data packets received by the first MAC unit wherein the data packets are 

6 provided to the first input of the multiplexer from the first rate buffers. 

1 21. The terminal according to claim 20 wherein the first MAC unit further 

2 comprises a first data encryption apparatus coupled to the first rate buffer. 

1 22. The terminal according to claim 19 wherein the first MAC unit comprises a 

2 first data packet switch having a 100 mega-bits per second (Mbps) port wherein the first 

3 data packet sv^dtch is coupled to the rate control unit. 
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23. The terminal according to claim 22 wherein the first data packet switch is a 

layer-two switch. 



1 24. The terminal according to claim 22 wherein the first data packet switch is a 

2 layer-three switch. 

1 25. The terminal according to claim 22 wherein the first data packet switch 

2 further comprises a 10 Mbps port. 

1 26. The terminal according to claim 22 wherein the 100 Mbps port receives data 

2 packets from a local area network coupled to the terminal. 

1 27, The terminal according to claim 19 wherein the second data packet receiver 

2 is a second MAC imit. 

1 28. The terminal according to claim 27 wherein the first MAC unit comprises a 

2 first data packet switch having a 100 Mbps port and wherein the second MAC unit 

3 comprises a second data packet switch having a 100 Mbps port. 

1 29. The terminal according to claim 28 wherein the first data packet switch and 

2 the second data packet switch are each a layer-two switch. 



1 30. The terminal according to claim 28 wherein the first MAC unit fiirther 

2 comprises: 

3 a. a first rate control unit coupled to the first data packet switch; and 

4 b. a first rate buffer coupled to the first rate control unit for temporarily storing 

5 data packets received by the first data packet switch wherein the data packets 

6 are provided to the first input of the multiplexer from the first rate buffers. 

1 31. The terminal according to claim 30 wherein the second MAC unit further 

2 comprises: 

3 a. a second rate control unit coupled to the second data packet switch; and 



- 47 - 



wo 99/62231 PCT/US99/1 1 137 

4 b. a second rate buffer coupled to the second rate control unit for temporarily 

5 storing data packets received by the second data packet switch wherein the 

6 data packets are provided to the second input of the multiplexer from the 

7 second rate buffers. 

1 32. The terminal according to claim 28 wherein the first MAC unit further 

2 comprises a first data encryption apparatus coupled to the first data packet switch. 

1 33. The terminal according to claim 32 wherein the second MAC unit further 

2 comprises a second data encryption apparatus coupled to the second data packet switch. 

1 34. A terminal for a wireless link in a metropolitan area, the terminal 

2 comprising: 

3 a. a first media access control (MAC) unit for receiving Fast Ethernet data 

4 packets at a rate of 100 mega-bits per second (Mbps) for communication 

5 over a wireless link; 

6 b. n-1 additional MAC units for receiving Fast Ethernet data packets at a rate 

7 of 1 GO Mbps for communication over the wireless link; 

8 c. a multiplexer having n inputs, wherein each input is coupled to receive the 

9 data packets from a corresponding one of the first MAC unit and the n-1 

10 additional MAC units and wherein the output of the multiplexer provides 

1 1 time-division multiplexed data; 

12 d, a packet formatting apparatus coupled to the output of the multiplexer for 

13 formatting the time division multplexed data according to radio frames; and 

14 e. a wireless transceiver coupled to the packet formatting apparatus for 

15 communicating the radio frames over a wireless Hnk wherein the wireless 

16 link has a maximum bandwidth capacity of at least n times 100 Mbps. 
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1 35. The terminal according to claim 34 wherein each of the first MAC unit and 

2 the n-1 additional MAC units further comprise a rate control unit and a rate buffer coupled 

3 to the corresponding rate control unit for temporarily storing data packets received by the 

4 corresponding MAC unit prior to providing them to a corresponding one of the inputs of 

5 the multiplexer. 

1 36, The terminal according to claim 35 wherein the first MAC unit and the n-1 

2 additional MAC units further comprise an encryption apparatus coupled to the rate buffer 

3 of the corresponding MAC unit for encrypting data packets received by the corresponding 

4 MAC unit. 

1 37. The terminal according to claim 34 wherein the first MAC unit comprises a 

2 first data packet switch having a 1 00 Mbps port. 

1 38. The terminal according to claim 37 wherein the first data packet switch is a 

2 layer-two switch. 

1 39, The terminal according to claim 37 wherein the first data packet switch is a 

2 layer-three switch. 

1 40. The terminal according to claim 37 wherein the first data packet switch 

2 further comprises a 10 Mbps port. 

1 41. The terminal according to claim 37 wherein the first MAC unit further 

2 comprises: 

3 a. a first rate control unit coupled to the first data packet switch; and 

4 b. a first rate buffer coupled to the first rate control unh for temporarily storing 

5 data packets received by the first data packet switch wherein the data packets 

6 are provided to the first input of the multiplexer firom the first rate buffers. 

1 42. The terminal according to claim 37 wherein each of the n-1 additional MAC 

2 units comprises a corresponding data packet switch having a 100 Mbps port. 
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1 43, The terminal according to claim 42 wherein each of the first MAC imit and 

2 the n-1 additional MAC units further comprises a rate control unit coupled to the 

3 corresponding data packet switch and a rate buffer coupled to the corresponding rate 

4 control unit for temporarily storing data packets prior to providing them to a corresponding 

5 one of the inputs of the multiplexer. 
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